CVE-2015-7450

KEV

IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.

Vendor / Project: IBM
Product: WebSphere Application Server and Server Hypervisor Edition
Date added: Jan 10, 2022
Due date: Jul 10, 2022
Known ransomware use: Unknown
CWEs: CWE-94

Description

Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2015-7450