{"id":"CVE-2015-7450","kind":"vulnerability","aliases":["CVE-2015-7450"],"related":[],"title":"IBM WebSphere Application Server and Server Hypervisor Edition: IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.","description":"Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.","summary":"IBM WebSphere Application Server and Server Hypervisor Edition contain serialized-object interfaces that accept untrusted input. A remote attacker can exploit them to execute arbitrary commands on the server.","severity":"critical","cvss":10.0,"epss":0.97764,"exploited":true,"exploited_at":"2022-01-10T00:00:00+00:00","products":[{"name":"IBM WebSphere Application Server and Server Hypervisor Edition","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","ibm","java","self-hosted","vendor","websphere"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply updates per vendor instructions, as directed by CISA's required action.","status":"open","published_at":"2016-01-02T21:59:15+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T21:31:45+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T21:31:45Z","model":"claude-haiku-5-5","output":{"fix":"Apply updates per vendor instructions, as directed by CISA's required action.","reach":"internet","impact":"high","summary":"IBM WebSphere Application Server and Server Hypervisor Edition contain serialized-object interfaces that accept untrusted input. A remote attacker can exploit them to execute arbitrary commands on the server.","category":"vendor","who_cares":["websphere","ibm","java","self-hosted"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Remote attacker executes arbitrary commands on the server","analyst_note":"Sources give no affected or fixed versions and no check method; find IBM's security bulletin for CVE-2015-7450 and the list of affected WebSphere releases.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000451,"input_tokens":2880,"output_tokens":327,"severity_before":"unknown"},"analyst_status":"queued","analyst_note":"Sources give no affected or fixed versions and no check method; find IBM's security bulletin for CVE-2015-7450 and the list of affected WebSphere releases.","search":"'-2015':20A,23A '-7450':21A,24A 'accept':55B 'allow':89C 'analyt':78C 'and':29A 'apach':109C 'applic':3A,11A,43B 'application':27A 'arbitrari':66B,94C 'attack':60B,91C 'busi':79C 'certain':76C 'class':106C 'code':17A 'cognit':81C 'collect':111C 'command':67B,95C 'common':110C 'contain':49B 'craft':98C 'cve':19A,22A 'edit':8A,16A,48B 'edition':32A 'execut':65B,93C 'exploit':33B,62B 'host':38B 'hypervisor':7A,15A,31A,47B 'ibm':1A,9A,25A,34B,41B,77C 'infrastructur':83C 'inject':18A 'input':57B 'interfac':53B,74C 'invokertransform':105C 'java':35B,100C 'librari':112C 'mobil':85C 'object':52B,73C,101C 'product':88C 'relat':102C 'remot':59B,90C 'self':37B 'self-host':36B 'serial':51B,72C,99C 'serialized-object':50B,71C 'server':4A,6A,12A,14A,28A,30A,44B,46B,70B 'social':87C 'solut':80C 'untrust':56B 'vendor':39B 'via':96C 'webspher':2A,10A,40B,42B 'websphere':26A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2016-01-02T21:59:15+00:00","kev":{"dateAdded":"2022-01-10","dueDate":"2022-07-10","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2015-7450","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-7450","severity":null,"published_at":"2022-01-10T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T14:39:41+00:00","note":null},{"source":"epss","external_id":"CVE-2015-7450","url":"https://api.first.org/data/v1/epss?cve=CVE-2015-7450","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2015-7450","url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7450","severity":null,"published_at":"2016-01-02T21:59:15+00:00","modified_at":"2026-06-17T00:32:33+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}