org.apache.commons:commons-collections4 vulnerabilities (Maven)

2 vulnerabilities.

• org.apache.commons:commons-collections4 Maven Deserialization of Untrusted Data in Apache commons collections CVE-2015-7501 Known exploitedPublic exploitFix available EPSS 85.6% 9.8 CriticalJanuary 14, 2016
• org.apache.commons:commons-collections4 Maven Insecure Deserialization in Apache Commons Collection CVE-2015-6420 Public exploitFix available EPSS 24.2% 9.8 CriticalDecember 15, 2015