CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2015-7450
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.
Severity
- EPSS
- 98% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2022-01-10, due 2022-07-10
- CWE
- CWE-502
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:sterling_b2b_integrator
- ibm:sterling_integrator
- ibm:tivoli_common_reporting
- ibm:watson_content_analytics
- ibm:watson_explorer_analytical_components
- ibm:watson_explorer_annotation_administration_console
- ibm:websphere_application_server