Advisories · Technology
Google Cloud Application Integration.
Every CVE that names Google Cloud Application Integration among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.4 CriticalCritical · CVSS 9+
Unsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code Execution
- Google Cloud Application Integration
- Insecure deserialization
- CVSS 7.3 High
Improper Authorization in Google Cloud Application Integration Leads to Privilege Escalation
- Google Cloud Application Integration
- Broken access control
- CVSS 8.3 High
Confused Deputy in Application Integration allows Internal File Read
- Google Cloud Application Integration
- CWE-610
- CVSS 9.4 CriticalCritical · CVSS 9+
Deserialization of Untrusted Data in Application Integration allows Remote Code Execution
- Google Cloud Application Integration
- Insecure deserialization
- CVSS 9.4 CriticalCritical · CVSS 9+
Incorrect Authorization in Application Integration allows Internal Stubby RPC Execution
- Google Cloud Application Integration
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Missing Authorization in Application Integration QueryEngineTask
- Google Cloud Application Integration
- Broken access control
- CVSS 9.4 CriticalCritical · CVSS 9+
Sandbox Escape in Google Cloud Application Integration's JavaScript Task (Rhino Engine)
- Google Cloud Application Integration
- CWE-829