CVE-2015-4852

CWE-502

Critical

103.7

RPS

Description

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.

Source: NVD

CVSS: 9.8; Critical · v3.1
EPSS: 96.03%; Probability of exploitation in the next 30 days (FIRST)
CISA KEV: In CISA KEV since Nov 2021
Fix commit: No known fix commit; Sources: MoreFixes, FreshFixes
Weakness: CWE-502
Published: 18 Nov 2015; Last modified 21 Apr 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2015-4852

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 7 Oct 2026, 05:16 UK time

CVE-2015-4852

Description

Signals

Get this score from the API