CVE Feed

    Dashboard / CVE / CVE-2015-7450

    CVE-2015-7450

    Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.

    Published:Jan 2, 2016
    Last Modified:Apr 21, 2026
    EPS:Jan 2, 2016
    EPSS Score:0.93274
    CVSS Score:9.8

    CISA Notification

    Description

    Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    Jul 10, 2022
    1524 days ago
    Alert Date
    Jan 10, 2022
    1705 days ago

    Affected Products

    Vendor
    Ibm
    Product
    Sterling B2b Integrator
    Vendor
    Ibm
    Product
    Sterling Integrator
    Vendor
    Ibm
    Product
    Tivoli Common Reporting
    Vendor
    Ibm
    Product
    Watson Content Analytics
    Vendor
    Ibm
    Product
    Watson Explorer Analytical Components
    Vendor
    Ibm
    Product
    Watson Explorer Annotation Administration Console
    Vendor
    Ibm
    Product
    Websphere Application Server

    Exploits

    https://www.exploit-db.com/exploits/41613/https://www.exploit-db.com/exploits/41613/https://www.exploit-db.com/exploits/41613

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-586 Object Injection

    Related CVEs

    CVE-2025-36431 (CVSS 5.4) — IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.0_1 …
    CVE-2025-36298 (CVSS 5.4) — IBM Sterling B2B Integrator 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, a…
    CVE-2026-1918 (CVSS 4.9) — IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_…
    CVE-2026-3157 (CVSS 4.3) — IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_…
    CVE-2026-3158 (CVSS 4.3) — IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_…
    CVE-2026-7362 (CVSS 4.3) — IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gat…
    CVE-2026-7769 (CVSS 8.1) — IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_…
    CVE-2026-7775 (CVSS 5.5) — IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 …
    CVE-2026-3482 (CVSS 5.3) — IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2,  6.2.1.0 through 6.2.1.1_…
    CVE-2026-7253 (CVSS 6) — IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user c…

    References

    http://www-01.ibm.com/support/docview.wss?uid=swg21970575
    http://www-01.ibm.com/support/docview.wss?uid=swg21971342
    http://www-01.ibm.com/support/docview.wss?uid=swg21971376
    http://www-01.ibm.com/support/docview.wss?uid=swg21971733
    http://www-01.ibm.com/support/docview.wss?uid=swg21971758
    http://www-01.ibm.com/support/docview.wss?uid=swg21972799
    http://www.securityfocus.com/bid/77653
    http://www.securitytracker.com/id/1035125
    https://www.exploit-db.com/exploits/41613/
    http://www-01.ibm.com/support/docview.wss?uid=swg21970575
    http://www-01.ibm.com/support/docview.wss?uid=swg21971342
    http://www-01.ibm.com/support/docview.wss?uid=swg21971376
    http://www-01.ibm.com/support/docview.wss?uid=swg21971733
    http://www-01.ibm.com/support/docview.wss?uid=swg21971758
    http://www-01.ibm.com/support/docview.wss?uid=swg21972799
    http://www.securityfocus.com/bid/77653
    http://www.securitytracker.com/id/1035125
    https://www.exploit-db.com/exploits/41613/
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-7450

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High