Back to Database
Status published
Unknown
CVE-2022-46478
The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2...
Vulnerability Description
The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitrary commands via crafted Hessian serialized data.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-46478
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
datax-web project
View all reports →Affected Software
datax-web
Vulnerable Versions:
1.0.0
Timeline
Official Publish:
January 13th, 2023
Last Modified:
April 7th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.