CVE-2015-4852

🗓️ 18 Nov 2015 15:00:00Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 2203 Views🌐 WEB

Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote code executio

Reporter	Title	Published	Views	Family All 83
GithubExploit	Nessus-CVE-POC-Finder	30 Jun 202613:08	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Oracle Virtual_Desktop_Infrastructure	3 Mar 201618:33	–	githubexploit
zdt	Oracle WebLogic Server 10.3.6.0 - Java Deserialization Exploit	28 Sep 201700:00	–	zdt
zdt	Websphere / JBoss / OpenNMS / Symantec - Java Deserialization Remote Code Execution	29 Apr 201800:00	–	zdt
zdt	Oracle Weblogic Server Deserialization Remote Code Execution Exploit	27 Mar 201900:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM® Engineering Lifecycle Management is impacted by vulnerabilties in Apache Commons Collections	18 Oct 202401:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management (JazzSM) is affected with multiple vulnerabilities (CVE-2015-4852, CVE-2015-6420, CVE-2017-15708)	20 Oct 202011:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Commons Collections, Apache Synapse, Oracle WebLogic Server, MuleSoft and Red Hat JBoss might affect IBM Storage Copy Data Management.	24 Jan 202519:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Apache common collections (commons-collections-3.2.jar) have affected APM WebSphere Application Server Agent	17 Jul 202306:26	–	ibm

NVD

Node

Node

Source	Link
securityfocus	www.securityfocus.com/bid/77539
securitytracker	www.securitytracker.com/id/1038292
github	www.github.com/foxglovesec/JavaUnserializeExploits/blob/master/weblogic.py
exploit-db	www.exploit-db.com/exploits/46628/
oracle	www.oracle.com/technetwork/topics/security/alert-cve-2015-4852-2763333.html
packetstormsecurity	www.packetstormsecurity.com/files/152268/Oracle-Weblogic-Server-Deserialization-Remote-Code-Execution.html
foxglovesecurity	www.foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/
oracle	www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
exploit-db	www.exploit-db.com/exploits/42806/
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Parameter	Position	Path	Description	CWE
t3 protocol traffic	nested	t3://us-l-breens:7001	Remote code execution via crafted serialized Java object in T3 protocol traffic.	CWE-502

17 Jun 2026 00:28Current

8.2High risk

Vulners AI Score8.2

CVSS 27.5

CVSS 3.19.8

EPSS0.94991

SSVC