redhat data-grid CVE-2015-7501 vulnerability in Red Hat Products
Published on November 9, 2017

Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2015-7501

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2015-7501 are published in these products:

Red Hat Data Grid
 
Red Hat Jboss A Mq
 
Red Hat Jboss Bpm Suite
 
Red Hat Jboss Data Virtualization
 
Red Hat Jboss Enterprise Application Platform
 
Red Hat Jboss Enterprise Brms Platform
 
Red Hat Jboss Enterprise Soa Platform
 
Red Hat Jboss Enterprise Web Server
 
Red Hat Jboss Fuse
 
Red Hat Jboss Fuse Service Works
 
Red Hat Jboss Operations Network
 
Red Hat Jboss Portal
 
Red Hat Openshift
 
Red Hat Subscription Asset Manager
 
Red Hat Xpaas
 

Exploit Probability

EPSS
71.46%
Percentile
98.69%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.