CVE-2022-29805: Fishbowlinventory Fishbowl

Critical severity, CVSS 9.8. EPSS: 27.6% chance of exploitation in the next 30 days.

A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attackers to execute arbitrary code via a crafted XML payload.

Affected products

• Fishbowlinventory Fishbowl: before 2022.4.1 (fixed in 2022.4.1)

Published 2022-08-19. Last modified 2026-06-17.