CVE-2015-4852 · Sandworm Watch

Nov 3, 2021high

CVE-2015-4852: Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability

Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code execution. Required action: Apply updates per vendor instructions.

CVE-2015-4852EPSS 96.0%OracleWebLogic Server

CISA KEV ↗ · unattributed attribution