Critical severity9.8CISA KEVNVD Advisory· Published Jan 2, 2016· Updated Apr 21, 2026
CVE-2015-7450
CVE-2015-7450
Description
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.
Affected products
20- cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sterling_integrator:5.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_common_reporting:2.1:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:ibm:tivoli_common_reporting:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_common_reporting:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_common_reporting:2.1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_common_reporting:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_common_reporting:3.1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_common_reporting:3.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_common_reporting:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_common_reporting:3.1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:watson_content_analytics:*:*:*:*:*:*:*:*Range: >=3.0,<=3.0.0.6
cpe:2.3:a:ibm:watson_explorer_analytical_components:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:watson_explorer_analytical_components:*:*:*:*:*:*:*:*range: >=10.0,<=10.0.0.2
- cpe:2.3:a:ibm:watson_explorer_analytical_components:11.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:watson_explorer_annotation_administration_console:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:watson_explorer_annotation_administration_console:*:*:*:*:*:*:*:*range: >=10.0,<=10.0.0.2
- cpe:2.3:a:ibm:watson_explorer_annotation_administration_console:11.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_application_server:7.0.0.0:*:*:*:-:*:*:*+ 4 more
- cpe:2.3:a:ibm:websphere_application_server:7.0.0.0:*:*:*:-:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:-:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:hypervisor:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:8.5.5.5:*:*:*:liberty:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:traditional:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- www.exploit-db.com/exploits/41613/nvdExploitThird Party AdvisoryVDB Entry
- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- www.securityfocus.com/bid/77653nvdBroken LinkThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1035125nvdBroken LinkThird Party AdvisoryVDB Entry
- www-01.ibm.com/support/docview.wssnvdBroken Link
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.