Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:13488
HistoryMar 21, 2019 - 8:10 a.m.

Arbitrary Code Execution

2019-03-2108:10:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
74

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Apache Commons Collections (ACC) library is vulnerable to arbitrary code execution. The vulnerability is possible because it directly uses ACC, or contains ACC, in the classpath, allowing a malicious user to inject and execute arbitrary code upon deserialization.

CPENameOperatorVersion
apache commons collectionsle3.2.1

Related

nessus 3
openvas 1
thn 1
cve 1
github 1
osv 1
prion 1
cisco 1
veracode 2
ibm 12
mskb 1
cert 2
impervablog 1
oracle 1
nessus
nessus
Cisco Security Manager Java Object Deserialization RCE (CSCux34671)
2017-05-02 00:00:00
Cisco Unified Communications Manager Java Object Deserialization RCE (CSCux34835)
2016-10-10 00:00:00
Cisco Prime LAN Management Solution Java Object Deserialization RCE (CSCux34647)
2017-05-02 00:00:00
openvas
openvas
Cisco Webex Meetings Server Java Deserialization Vulnerability
2016-09-22 00:00:00
thn
thn
Google Employees Help Thousands Of Open Source Projects Patch Critical ‘Mad Gadget Bug’
2017-03-02 00:48:00
cve
cve
CVE-2015-6420
2015-12-15 05:59:00
github
github
Insecure Deserialization in Apache Commons Collection
2020-06-15 20:36:20
osv
osv
Insecure Deserialization in Apache Commons Collection
2020-06-15 20:36:20
prion
prion
Code injection
2015-12-15 05:59:00
cisco
cisco
Vulnerability in Java Deserialization Affecting Cisco Products
2015-12-09 16:00:00
veracode
veracode
Arbitrary Code Execution
2019-07-08 10:38:22
Potential Remote Code Execution Via Java Object Deserialization
2015-11-09 19:34:22
ibm
ibm
Security Bulletin: IBM Sterling Global Mailbox is vulnerable to arbitrary code execution due to Apache Commons Collections [CVE-2015-6420, CVE-2017-15708]
2023-07-21 12:22:34
Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities
2020-07-17 16:51:47
Security Bulletin: IBM Jazz for Service Management (JazzSM) is affected with multiple vulnerabilities (CVE-2015-4852, CVE-2015-6420, CVE-2017-15708)
2020-10-20 11:33:26
mskb
mskb
KB5003279 - SQL Server 2016 Service Pack 3 release information
1970-01-01 00:00:00
cert
cert
TP-Link EAP Controller lacks RMI authentication and is vulnerable to deserialization attacks
2018-09-26 00:00:00
Apache Commons Collections Java library insecurely deserializes data
2015-11-13 00:00:00
impervablog
impervablog
Deserialization Attacks Surge Motivated by Illegal Crypto-mining
2018-01-24 17:45:08
oracle
oracle
CPU July 2018
2018-07-17 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON
Related for VERACODE:13488
nessus3openvas1thn1cve1github1osv1prion1cisco1veracode2ibm12mskb1cert2impervablog1oracle1