description: The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage.
problem types: CWE-502
affected:
{
product: Artemis in EAP 7
vendor: n/a
versions:
status: affected, version: 7.3.9.GA, 7.4.0.GA
}