CVE coverage
View on NVD →
CVE-2015-7450
CVSS 9.8
Actively exploited (KEV)
2 detections found
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET EXPLOIT IBM WebSphere - RCE Java Deserialization | rev 4 | 2024-03-07 |
| snort | ET EXPLOIT IBM WebSphere - RCE Java Deserialization | rev 2 | 2017-03-15 |