CVE-2020-11630: Primekey Ejbca

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. In several sections of code, the verification of serialized objects sent between nodes (connected via the Peers protocol) allows insecure objects to be deserialized.

Affected products

• Primekey Ejbca: before 6.15.2.6 (fixed in 6.15.2.6); from 7.0.0, before 7.3.1.2 (fixed in 7.3.1.2)

Published 2020-04-08. Last modified 2026-06-17.