1 matches found
CVE-2015-7450: Deserialization of Untrusted Data
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons...
10CVSS7.7AI score0.97764EPSS
SaveExploits10References3
20