Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-6420
HistoryDec 15, 2015 - 5:59 a.m.

CVE-2015-6420

2015-12-1505:59:07
CWE-502
[email protected]
web.nvd.nist.gov
182
cisco
code execution
java
cve-2015-6420
security vulnerability

7.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON

Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Affected configurations

NVD
Node
apachecommons_collectionsRange≤3.2.1
OR
apachecommons_collectionsMatch4.0

Related

openvas 1
nessus 3
veracode 3
osv 1
thn 1
github 1
cisco 1
prion 1
nvd 1
cvelist 1
cert 2
mskb 1
ibm 12
impervablog 1
oracle 1
openvas
openvas
Cisco Webex Meetings Server Java Deserialization Vulnerability
2016-09-22 00:00:00
nessus
nessus
Cisco Security Manager Java Object Deserialization RCE (CSCux34671)
2017-05-02 00:00:00
Cisco Unified Communications Manager Java Object Deserialization RCE (CSCux34835)
2016-10-10 00:00:00
Cisco Prime LAN Management Solution Java Object Deserialization RCE (CSCux34647)
2017-05-02 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-03-21 08:10:25
Arbitrary Code Execution
2019-07-08 10:38:22
Potential Remote Code Execution Via Java Object Deserialization
2015-11-09 19:34:22
osv
osv
Insecure Deserialization in Apache Commons Collection
2020-06-15 20:36:20
thn
thn
Google Employees Help Thousands Of Open Source Projects Patch Critical ‘Mad Gadget Bug’
2017-03-02 00:48:00
github
github
Insecure Deserialization in Apache Commons Collection
2020-06-15 20:36:20
cisco
cisco
Vulnerability in Java Deserialization Affecting Cisco Products
2015-12-09 16:00:00
prion
prion
Code injection
2015-12-15 05:59:00
nvd
nvd
CVE-2015-6420
2015-12-15 05:59:07
cvelist
cvelist
CVE-2015-6420
2015-12-15 02:00:00
cert
cert
TP-Link EAP Controller lacks RMI authentication and is vulnerable to deserialization attacks
2018-09-26 00:00:00
Apache Commons Collections Java library insecurely deserializes data
2015-11-13 00:00:00
mskb
mskb
KB5003279 - SQL Server 2016 Service Pack 3 release information
1970-01-01 00:00:00
ibm
ibm
Security Bulletin: IBM Sterling Global Mailbox is vulnerable to arbitrary code execution due to Apache Commons Collections [CVE-2015-6420, CVE-2017-15708]
2023-07-21 12:22:34
Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities
2020-07-17 16:51:47
Security Bulletin: IBM Jazz for Service Management (JazzSM) is affected with multiple vulnerabilities (CVE-2015-4852, CVE-2015-6420, CVE-2017-15708)
2020-10-20 11:33:26
impervablog
impervablog
Deserialization Attacks Surge Motivated by Illegal Crypto-mining
2018-01-24 17:45:08
oracle
oracle
CPU July 2018
2018-07-17 00:00:00

7.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON
Related for CVE-2015-6420
openvas1nessus3veracode3osv1thn1github1cisco1prion1nvd1cvelist1cert2mskb1ibm12impervablog1oracle1