{"id":"CVE-2015-7450","aliases":["EUVD-2015-7374","GHSA-8987-qgc7-79p9"],"status":"published","title":"Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT...","description":"Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.97764,"percentile":0.99905,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-502","CWE-94"],"published":"2016-01-02T21:00:00Z","modified":"2026-06-17T00:32:33Z","kev":{"date_added":"2022-01-10","due_date":"2022-07-10","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-01-10"},{"source":"kev","since":"2022-01-10"}],"exploits":[{"source":"metasploit","id":"exploit/windows/misc/ibm_websphere_java_deserialize","title":"IBM WebSphere RCE Java Deserialization Vulnerability","type":"exploit","platform":"Windows","date":"2015-11-06","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/misc/ibm_websphere_java_deserialize"},{"source":"exploitdb","id":"EDB-41613","title":"IBM WebSphere - RCE Java Deserialization (Metasploit)","type":"remote","platform":"windows","date":"2017-03-15","verified":true,"url":"https://www.exploit-db.com/exploits/41613"},{"source":"nuclei","id":"CVE-2015-7450","title":"IBM WebSphere Java Object Deserialization - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7450.yaml"}],"products":[{"vendor":"ibm","product":"sterling_b2b_integrator"},{"vendor":"ibm","product":"sterling_integrator"},{"vendor":"ibm","product":"tivoli_common_reporting"},{"vendor":"ibm","product":"watson_content_analytics"},{"vendor":"ibm","product":"watson_explorer_analytical_components"},{"vendor":"ibm","product":"watson_explorer_annotation_administration_console"},{"vendor":"ibm","product":"websphere application server and server hypervisor edition"},{"vendor":"ibm","product":"websphere_application_server"}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971733","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971342","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971758","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/77653","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035125","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21972799","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21971376","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/41613/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21970575","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-7450","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7450"},{"url":"https://www.exploit-db.com/exploits/41613"},{"url":"https://github.com/advisories/GHSA-8987-qgc7-79p9"}],"sources":{"cve":[{"id":"CVE-2015-7450","description":"Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.","status":"published","published":"2016-01-02T21:00:00Z","modified":"2025-10-21T23:55:56.246Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:35:44.404481Z"}],"euvd":[{"id":"EUVD-2015-7374","description":"Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.","status":"published","published":"2016-01-02T21:00:00Z","modified":"2025-10-21T23:55:56Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2022-01-10","updated_at":"2026-11-02T19:49:39.684828Z"}],"ghsa":[{"id":"GHSA-8987-qgc7-79p9","title":"Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT...","description":"Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.","status":"published","published":"2022-05-17T01:10:19Z","modified":"2025-10-22T00:31:12Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94","CWE-502"],"updated_at":"2026-11-02T15:04:03.556367Z"}],"kev":[{"id":"CVE-2015-7450","title":"IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.","description":"Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands","cwes":["CWE-94"],"kev":{"date_added":"2022-01-10","due_date":"2022-07-10","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2015-7450","description":"Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.","status":"published","published":"2016-01-02T21:59:15.8Z","modified":"2026-06-17T00:32:33.67Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:03:15.746629Z"}]}}