Security Advisory
CVE-2015-7450
9.8
CRITICAL
Vulnerability Description
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.
Published Date
January 2, 2016
Official Source
NIST NVD Advisory