critique
CVE-2015-4852
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote…
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Ubuntu (élevée).
Description
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| ubuntu 14.04-ESM | libcommons-collections3-java | 3.2.1-6ubuntu0.1~esm1 |
Références
- http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/
- http://packetstormsecurity.com/files/152268/Oracle-Weblogic-Server-Deserialization-Remote-Code-Execution.html
- http://www.infoq.com/news/2015/11/commons-exploit
- http://www.openwall.com/lists/oss-security/2015/11/09/1
- http://www.openwall.com/lists/oss-security/2015/11/17/19
- http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
Les 25 références
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.oracle.com/technetwork/topics/security/alert-cve-2015-4852-2763333.html
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- http://www.securityfocus.com/bid/77539
- http://www.securitytracker.com/id/1038292
- https://access.redhat.com/solutions/2045023
- https://blogs.apache.org/foundation/entry/apache_commons_statement_to_widespread
- https://blogs.oracle.com/security/entry/security_alert_cve_2015_4852
- https://github.com/foxglovesec/JavaUnserializeExploits/blob/master/weblogic.py
- https://issues.apache.org/jira/browse/COLLECTIONS-580
- https://ubuntu.com/security/notices/USN-6936-1
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-4852
- https://www.cve.org/CVERecord?id=CVE-2015-4852
- https://www.exploit-db.com/exploits/42806/
- https://www.exploit-db.com/exploits/46628/
- https://www.kb.cert.org/vuls/id/576313