apache groovy CVE-2015-3253 in Apache and Oracle Products
Published on August 13, 2015

product logo product logo
The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2015-3253

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2015-3253 are published in these products:

Apache Groovy
 
Oracle Health Sciences Clinical Development Center
 
Oracle Retail Order Broker Cloud Service
 
Oracle Retail Service Backbone
 
Oracle Retail Store Inventory Management
 
Oracle Webcenter Sites
 

Exploit Probability

EPSS
66.03%
Percentile
98.47%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.