High severity8.1NVD Advisory· Published Sep 11, 2023· Updated Jun 17, 2026

CVE-2022-1415

Description

A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker to construct malicious serialized objects (usually called gadgets) and achieve code execution on the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.drools:drools-coreMaven	< 7.69.0.Final	7.69.0.Final

Affected products

Red Hat/Red Hat Integration Camel Quarkusv5
cpe:/a:redhat:camel_quarkus:2
Red Hat/Build Of Apache Camel For Spring Bootcpe-rescue
cpe:/a:redhat:camel_spring_boot:3
Red Hat/Red Hat Integration Camel Kv5
cpe:/a:redhat:integration:1
Red Hat/Red Hat JBoss Data Grid 7v5
cpe:/a:redhat:jboss_data_grid:7
Red Hat/Jboss Data Virtualizationcpe-rescue
cpe:/a:redhat:jboss_data_virtualization:6
Red Hat/Jboss Enterprise Application Platform Expansion Packcpe-rescue
cpe:/a:redhat:jbosseapxp
Red Hat/Jboss Enterprise Application Platformcpe-rescue2 versions
cpe:/a:redhat:jboss_enterprise_application_platform:6+ 1 more
- cpe:/a:redhat:jboss_enterprise_application_platform:6
- cpe:/a:redhat:jboss_enterprise_application_platform:7
Red Hat/Process Automationcpe-rescue
cpe:/a:redhat:jboss_enterprise_bpms_platform:7
Red Hat/RHPAM 7.13.1 asyncv5
cpe:/a:redhat:jboss_enterprise_bpms_platform:7.13
Red Hat/Red Hat Decision Manager 7v5
cpe:/a:redhat:jboss_enterprise_brms_platform:7
Red Hat/Red Hat JBoss Fuse 6v5
cpe:/a:redhat:jboss_fuse:6
Red Hat/Red Hat JBoss Fuse 7v5
cpe:/a:redhat:jboss_fuse:7
Red Hat/Jboss Fuse Service Workscpe-rescue
cpe:/a:redhat:jboss_fuse_service_works:6
Red Hat/Red Hat build of Quarkusv5
cpe:/a:redhat:quarkus:2
ghsa-coords70 versions
pkg:maven/org.drools/drools-core pkg:rpm/suse/cobbler&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/cobbler&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/drools&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/drools&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/grafana-formula&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/grafana-formula&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/image-sync-formula&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/inter-server-sync&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/inter-server-sync&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/mgr-osad&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/mgr-osad&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/mgr-osad&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/mgr-push&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/prometheus-formula&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/py27-compat-salt&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/release-notes-susemanager&distro=SUSE%20Manager%20Server%204.3 pkg:rpm/suse/rhnlib&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/rhnlib&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/rhnlib&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/saltboot-formula&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/saltboot-formula&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/salt-netapi-client&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/smdba&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/spacecmd&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/spacecmd&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/spacecmd&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/spacewalk-admin&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/spacewalk-certs-tools&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/spacewalk-certs-tools&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/spacewalk-certs-tools&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/spacewalk-java&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/spacewalk-java&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/spacewalk-proxy&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/spacewalk-proxy-installer&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/spacewalk-search&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/spacewalk-search&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/spacewalk-utils&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/supportutils-plugin-susemanager&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/supportutils-plugin-susemanager&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/susemanager-build-keys&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/susemanager-build-keys&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/susemanager-build-keys&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/susemanager&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/susemanager&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/susemanager-doc-indexes&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/susemanager-docs_en&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/susemanager-docs_en&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/susemanager-schema&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/susemanager-schema&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/susemanager-sls&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/susemanager-sls&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/susemanager-sync-data&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/susemanager-tftpsync&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/uyuni-common-libs&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/uyuni-common-libs&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/uyuni-common-libs&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/uyuni-setup-reportdb&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/virtual-host-gatherer&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/virtual-host-gatherer&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/woodstox&distro=SUSE%20Manager%20Server%20Module%204.2
< 7.69.0.Final+ 69 more
- (no CPE)range: < 7.69.0.Final
- (no CPE)range: < 3.1.2-150300.5.19.1
- (no CPE)range: < 3.3.3-150400.5.17.3
- (no CPE)range: < 7.17.0-150300.4.9.2
- (no CPE)range: < 7.17.0-150400.3.9.3
- (no CPE)range: < 0.8.1-150300.3.9.2
- (no CPE)range: < 0.8.0-150400.3.6.3
- (no CPE)range: < 0.1.1673279145.e7616bd-150400.3.9.3
- (no CPE)range: < 0.2.7-150300.8.28.2
- (no CPE)range: < 0.2.6-150400.3.12.3
- (no CPE)range: < 4.2.9-150300.2.12.2
- (no CPE)range: < 4.2.9-150300.2.12.2
- (no CPE)range: < 4.3.7-150400.3.3.4
- (no CPE)range: < 4.3.5-150400.3.3.5
- (no CPE)range: < 0.7.0-150300.3.17.2
- (no CPE)range: < 3000.3-150300.7.7.29.2
- (no CPE)range: < 4.3.4-150400.3.43.1
- (no CPE)range: < 4.2.7-150300.4.12.2
- (no CPE)range: < 4.2.7-150300.4.12.2
- (no CPE)range: < 4.3.5-150400.3.3.3
- (no CPE)range: < 0.1.1676908681.e90e0b1-150300.3.15.1
- (no CPE)range: < 0.1.1673279145.e7616bd-150400.3.6.3
- (no CPE)range: < 0.21.0-150300.3.12.4
- (no CPE)range: < 1.7.11-0.150300.3.12.2
- (no CPE)range: < 4.2.21-150300.4.33.2
- (no CPE)range: < 4.2.21-150300.4.33.2
- (no CPE)range: < 4.3.18-150400.3.12.3
- (no CPE)range: < 4.2.13-150300.3.18.1
- (no CPE)range: < 4.2.26-150300.4.35.6
- (no CPE)range: < 4.2.26-150300.4.35.6
- (no CPE)range: < 4.3.18-150400.3.12.5
- (no CPE)range: < 4.2.19-150300.3.27.4
- (no CPE)range: < 4.2.19-150300.3.27.4
- (no CPE)range: < 4.3.17-150400.3.12.4
- (no CPE)range: < 4.2.22-150300.4.30.2
- (no CPE)range: < 4.2.22-150300.4.30.2
- (no CPE)range: < 4.3.14-150400.3.12.5
- (no CPE)range: < 4.2.47-150300.3.58.1
- (no CPE)range: < 4.3.46-150400.3.28.1
- (no CPE)range: < 4.2.13-150300.3.24.2
- (no CPE)range: < 4.2.11-150300.3.14.2
- (no CPE)range: < 4.2.9-150300.3.15.2
- (no CPE)range: < 4.3.8-150400.3.9.3
- (no CPE)range: < 4.3.16-150400.3.12.3
- (no CPE)range: < 4.2.32-150300.3.36.4
- (no CPE)range: < 4.2.32-150300.3.36.4
- (no CPE)range: < 4.3.27-150400.3.12.5
- (no CPE)range: < 4.2.5-150300.3.9.2
- (no CPE)range: < 4.3.6-150400.3.6.3
- (no CPE)range: < 15.3.6-150300.3.6.2
- (no CPE)range: < 15.3.6-150300.3.6.2
- (no CPE)range: < 15.4.7-150400.3.12.3
- (no CPE)range: < 4.2.40-150300.3.49.1
- (no CPE)range: < 4.3.23-150400.3.16.3
- (no CPE)range: < 4.2-150300.12.39.4
- (no CPE)range: < 4.2-150300.12.39.2
- (no CPE)range: < 4.3-150400.9.19.1
- (no CPE)range: < 4.2.27-150300.3.35.1
- (no CPE)range: < 4.3.16-150400.3.12.4
- (no CPE)range: < 4.2.31-150300.3.43.1
- (no CPE)range: < 4.3.29-150400.3.16.1
- (no CPE)range: < 4.3.12-150400.3.11.3
- (no CPE)range: < 4.3.3-150400.3.6.5
- (no CPE)range: < 4.2.9-150300.3.14.1
- (no CPE)range: < 4.2.9-150300.3.14.1
- (no CPE)range: < 4.3.7-150400.3.9.4
- (no CPE)range: < 4.3.6-150400.3.3.4
- (no CPE)range: < 1.0.24-150300.3.9.2
- (no CPE)range: < 1.0.24-150400.3.6.3
- (no CPE)range: < 4.4.2-150300.3.6.2

Patches

Vulnerability mechanics

References

access.redhat.com/errata/RHSA-2022:6813nvdVendor AdvisoryWEB
access.redhat.com/security/cve/CVE-2022-1415nvdVendor AdvisoryWEB
bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor AdvisoryWEB
github.com/advisories/GHSA-m5q8-58wh-xxq4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-1415ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000