Skip to content

Product

net.sourceforge.collections/collections-generic vulnerabilities

2 published CVES affecting net.sourceforge.collections/collections-generic, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
2
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest net.sourceforge.collections/collections-generic CVEs

Newest publication first

  1. CVE-2015-7501 Deserialization of Untrusted Data in Apache commons collections

    Published
    CriticalCVSS 9.8 EPSS 85.6% PoC

    Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SO...

  2. CVE-2015-6420 Insecure Deserialization in Apache Commons Collection

    Published
    CriticalCVSS 9.8 EPSS 24.2%

    Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Se...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.