Attack (Attack ID:323900)

Release Date2015/12/22

Attack NameEXPLOIT Oracle WebLogic Server Commons-Collections Library Insecure Deserialization -1 (CVE-2015-4852)

Severity

BUG ID

CVE ID

 

Description

This vulnerability is due to deseralization of untrusted data while having the vulnerable version of Apache Commons-Collections library in the code path.
Impact:Remote code execution
Affected System:Others
Additional References:CVE-2015-4852

 

Solution

Update vendor's patch.