CVE-2015-4852
EUVD-2015-486918.11.2015, 15:59
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| oracle | virtual_desktop_infrastructure | 𝑥 ≤ 3.5.2 |
| oracle | storagetek_tape_analytics_sw_tool | 2.3 |
| oracle | weblogic_server | 10.3.6.0.0 |
| oracle | weblogic_server | 12.1.2.0.0 |
| oracle | weblogic_server | 12.1.3.0.0 |
| oracle | weblogic_server | 12.2.1.0.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libcommons-collections3-java |
| ||||||||||||||||||||||||||||||||||||||||||
| libcommons-collections4-java |
| ||||||||||||||||||||||||||||||||||||||||||
| libxalan2-java |
| ||||||||||||||||||||||||||||||||||||||||||
| openjdk-6 |
| ||||||||||||||||||||||||||||||||||||||||||
| openjdk-7 |
| ||||||||||||||||||||||||||||||||||||||||||
| openjdk-8 |
|
Common Weakness Enumeration
References