CVE-2015-7450

No fix known ExploitedEPSS 98%CVSS 9.8

Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.

Published 2016-01-02 · In CISA KEV since 2022-01-10 · CVE record · OSV

Products: ibm sterling_b2b_integrator, ibm sterling_integrator, ibm tivoli_common_reporting, ibm watson_content_analytics, ibm watson_explorer_analytical_components, ibm watson_explorer_annotation_administration_console, ibm websphere_application_server