{"vulnerability": "cve-2015-7450", "sightings": [{"uuid": "b6059701-cb4e-41cc-ad5d-33bb08ec139e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7450", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "8b6806f1-5865-4b14-8d79-e743b1b93fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7450", "type": "exploited", "source": "https://www.exploit-db.com/exploits/41613", "content": "", "creation_timestamp": "2017-03-15T00:00:00.000000Z"}, {"uuid": "fe299753-a837-456c-9402-876d230dbc61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7450", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971199", "content": "", "creation_timestamp": "2024-12-24T20:25:45.946694Z"}, {"uuid": "234820dc-46b9-4215-a391-9d4f3123a2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7450", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "dc422986-e144-4afa-aea1-7971e4b672de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7450", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:09.000000Z"}, {"uuid": "efbfc47a-6ef4-4d2c-b960-e285a650d072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7450", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:42.000000Z"}, {"uuid": "8ae379d9-bcb3-4823-b1b8-22f41e330669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7450", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ibm_websphere_java_deserialize.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "f4911a22-02c5-4e3e-8f9b-b19a5d23b67f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2015-7450", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/25981ba1-5336-4dd3-9fb3-62ec8634db75", "content": "", "creation_timestamp": "2026-02-02T12:28:29.991818Z"}, {"uuid": "deefc461-2cc4-4c46-bcf4-ababc20f00b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7450", "type": "seen", "source": "Telegram/UJaQGI39wvSSJFDK-9dZna5v9tpRZRtByaqHqk-veUyjY3LM", "content": "", "creation_timestamp": "2025-02-14T10:05:09.000000Z"}, {"uuid": "ff3c836b-d24c-4956-85fc-6c49ad491958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7450", "type": "seen", "source": "https://t.me/arpsyndicate/1771", "content": "#ExploitObserverAlert\n\nCVE-2015-7450\n\nDESCRIPTION: Exploit Observer has 55 entries related to CVE-2015-7450. Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.\n\nFIRST-EPSS: 0.973900000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-11T15:49:29.000000Z"}, {"uuid": "8c8844f8-6d57-46b4-a8a2-21b63a489eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7450", "type": "seen", "source": "https://t.me/arpsyndicate/1433", "content": "#ExploitObserverAlert\n\nCVE-2015-7450\n\nDESCRIPTION: Exploit Observer has 55 entries related to CVE-2015-7450. Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.\n\nFIRST-EPSS: 0.973900000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-05T08:32:29.000000Z"}, {"uuid": "7f92001b-f7ac-4b99-aad2-1e1ab3c1230e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7450", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ebfbc254-3cfc-478e-9c0a-79175da2fe82", "content": "", "creation_timestamp": "2026-06-19T12:47:42.067310Z"}, {"uuid": "e120dedf-4e61-4c1b-a478-07ae2c27babc", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7450", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bb5a087e-843c-464e-a45a-1666735b8662", "content": "", "creation_timestamp": "2026-06-23T14:04:52.370366Z"}, {"uuid": "d368dec8-a68e-40ed-963b-6d7f99466f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7450", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ibm_websphere_java_deserialize.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Liatsis Fotios \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in IBM's WebSphere Application Server. An unsafe deserialization\\n          call of unauthenticated Java objects exists to the Apache Commons Collections (ACC) library, which allows\\n          remote arbitrary code execution. Authentication is not required in order to exploit this vulnerability.\", \"disclosure_date\": \"2015-11-06\", \"fullname\": \"exploit/windows/misc/ibm_websphere_java_deserialize\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"IBM WebSphere RCE Java Deserialization Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/misc/ibm_websphere_java_deserialize.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/misc/ibm_websphere_java_deserialize\", \"references\": [\"CVE-2015-7450\", \"URL-https://github.com/frohoff/ysoserial/blob/master/src/main/java/ysoserial/payloads/CommonsCollections1.java\", \"URL-http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability\", \"URL-https://www.tenable.com/plugins/index.php?view=single&id=87171\"], \"rport\": \"8880\", \"session_types\": false, \"targets\": [\"IBM WebSphere 7.0.0.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:19.861075Z"}]}