CVE-2015-7450

🗓️ 02 Jan 2016 21:00:00Reported by ibmType

cve🔗 web.nvd.nist.gov👁 1125 Views🌐 WEB

Serialized-object interfaces in IBM products allow remote attackers to execute arbitrary commands via crafted serialized Java object

Reporter	Title	Published	Views	Family All 159
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Commons affects IBM Tivoli Composite Application Manager Agent for J2EE (CVE-2015-7450)	17 Jun 201815:13	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Commons affects IBM Flex System Manager(FSM) (CVE-2015-7450)	18 Jun 201801:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Commons affects IBM System Networking Switch Center (CVE-2015-7450)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Framework for Java Deserialization in Rational Test Control Panel in Rational Test Workbench and Rational Test Virtualization Server (CVE-2015-7450)	17 Jun 201805:08	–	ibm
IBM Security Bulletins	Security Bulletins for Emptoris Program Management	8 Dec 201816:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Process Manager shipped with IBM Cloud Orchestrator and IBM SmartCloud Orchestrator	17 Jun 201822:30	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2015-7450)	15 Jun 201807:04	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Workload Scheduler (CVE-2015-7450)	17 Jun 201815:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Commons might affect WebSphere Industry Content Packs and IBM Business Process Manager Industry Packs (CVE-2015-7450)	15 Jun 201807:04	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Netcool Performance Manager (CVE-2015-7450)	17 Jun 201815:13	–	ibm

NVD

Node

ibm sterling_b2b_integratorMatch5.2

ibm sterling_integratorMatch5.1

ibm tivoli_common_reportingMatch2.1

ibm tivoli_common_reportingMatch2.1.1

ibm tivoli_common_reportingMatch2.1.1.2

ibm tivoli_common_reportingMatch3.1

ibm tivoli_common_reportingMatch3.1.0.1

ibm tivoli_common_reportingMatch3.1.0.2

ibm tivoli_common_reportingMatch3.1.2

ibm tivoli_common_reportingMatch3.1.2.1

ibm watson_content_analyticsRange3.0–3.0.0.6

ibm watson_content_analyticsRange3.5–3.5.0.3

ibm watson_explorer_analytical_componentsRange10.0–10.0.0.2

ibm watson_explorer_analytical_componentsMatch11.0

ibm watson_explorer_annotation_administration_consoleRange10.0–10.0.0.2

ibm watson_explorer_annotation_administration_consoleMatch11.0

ibm websphere_application_serverMatch7.0.0.0-

ibm websphere_application_serverMatch8.0.0.0-

ibm websphere_application_serverMatch8.5traditional

ibm websphere_application_serverMatch8.5.0.0hypervisor

ibm websphere_application_serverMatch8.5.5.5liberty

Source	Link
securitytracker	www.securitytracker.com/id/1035125
www-01	www.www-01.ibm.com/support/docview.wss
www-01	www.www-01.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/77653
www-01	www.www-01.ibm.com/support/docview.wss
www-01	www.www-01.ibm.com/support/docview.wss
www-01	www.www-01.ibm.com/support/docview.wss
www-01	www.www-01.ibm.com/support/docview.wss
exploit-db	www.exploit-db.com/exploits/41613/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
objectname	request body	/	Remote code execution via unsafe deserialization in IBM WebSphere through crafted serialized Java object in SOAP request	CWE-502

21 Apr 2026 19:12Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

CVSS 210

EPSS0.93274

SSVC