CVE-2015-4852
KEVOracle WebLogic Server Deserialization of Untrusted Data Vulnerability
View CVE record →- Vendor / Project
- Oracle
- Product
- WebLogic Server
- Date added
- Nov 3, 2021
- Due date
- May 3, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-502
Description
Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code execution.
Required action
Apply updates per vendor instructions.