Exposures › CVE-2015-7450

CVE-2015-7450

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-01-10

Reference

https://nvd.nist.gov/vuln/detail/CVE-2015-7450

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands

Players implicated

IBM · vendor WebSphere Application Server and Server Hypervisor Edition · product

Description

Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands

Affected FedRAMP products 5 in the catalog

Product	Provider	Status	Match
IBM Cloud for Government	IBM	Authorized	vendor-exact · 0.90
IBM Federal HR Cloud	IBM	Authorized	vendor-exact · 0.90
IBM Maximo and TRIRIGA on Cloud for U.S. Federal	IBM	Authorized	vendor-exact · 0.90
MaaS360 Enterprise Mobility Management	IBM	Authorized	vendor-exact · 0.90
SmartCloud for Government	IBM	Authorized	vendor-exact · 0.90