CVE-2015-4852 — Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability

CISA KEV listed Added November 3, 2021 Remediate by May 3, 2022

Description

Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2015-4852

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer