{"uuid": "d368dec8-a68e-40ed-963b-6d7f99466f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7450", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ibm_websphere_java_deserialize.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Liatsis Fotios \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in IBM's WebSphere Application Server. An unsafe deserialization\\n          call of unauthenticated Java objects exists to the Apache Commons Collections (ACC) library, which allows\\n          remote arbitrary code execution. Authentication is not required in order to exploit this vulnerability.\", \"disclosure_date\": \"2015-11-06\", \"fullname\": \"exploit/windows/misc/ibm_websphere_java_deserialize\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"IBM WebSphere RCE Java Deserialization Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/misc/ibm_websphere_java_deserialize.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/misc/ibm_websphere_java_deserialize\", \"references\": [\"CVE-2015-7450\", \"URL-https://github.com/frohoff/ysoserial/blob/master/src/main/java/ysoserial/payloads/CommonsCollections1.java\", \"URL-http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability\", \"URL-https://www.tenable.com/plugins/index.php?view=single&id=87171\"], \"rport\": \"8880\", \"session_types\": false, \"targets\": [\"IBM WebSphere 7.0.0.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:19.861075Z"}