Логотип exploitDog
bind:CVE-2015-4852
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2015-4852

Количество 5

Количество 5

ubuntu логотип

CVE-2015-4852

около 10 лет назад

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.

CVSS3: 9.8
EPSS: Критический
nvd логотип

CVE-2015-4852

около 10 лет назад

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.

CVSS3: 9.8
EPSS: Критический
github логотип

GHSA-7r6v-mxc2-pg49

больше 3 лет назад

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.

CVSS3: 9.8
EPSS: Критический
fstec логотип

BDU:2015-12099

около 10 лет назад

Уязвимость сервера приложений Oracle WebLogic Server, позволяющая нарушителю выполнить произвольный код

CVSS2: 7.5
EPSS: Критический
suse-cvrf логотип

SUSE-SU-2025:02056-1

8 месяцев назад

Security update for apache-commons-beanutils

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2015-4852

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.

CVSS3: 9.8
93%
Критический
около 10 лет назад
nvd логотип
CVE-2015-4852

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.

CVSS3: 9.8
93%
Критический
около 10 лет назад
github логотип
GHSA-7r6v-mxc2-pg49

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.

CVSS3: 9.8
93%
Критический
больше 3 лет назад
fstec логотип
BDU:2015-12099

Уязвимость сервера приложений Oracle WebLogic Server, позволяющая нарушителю выполнить произвольный код

CVSS2: 7.5
93%
Критический
около 10 лет назад
suse-cvrf логотип
SUSE-SU-2025:02056-1

Security update for apache-commons-beanutils

8 месяцев назад

Уязвимостей на страницу