CVE-2015-4852 — Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability

CISA KEVExploited: confirmedOracle

Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code execution.

Vulnerability details

Affected productsWebLogic Server
KEV remediation due2022-05-03