VDB

GCVE-110-CERTCC-2015-576313

GCVE-110-CERTCC-2015-576313
Advisory PublishedCVSS 7.5/10
Vulnetix · Advisory published January 28, 2015
The Apache Commons Collections (ACC) library is vulnerable to insecure deserialization of data, which may result in arbitrary code execution. Java applications that either directly use ACC, or contain ACC in their classpath, may be vulnerable to arbitrary code execution.
Download JSON Open in Console

Risk Scores

CVSS 2.0
7.5/10
High · AV:N/AC:L/Au:N/C:P/I:P/A:P
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population3d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score6.4remediation_levelWreport_confidenceCenvironmental_score6.39938352430125target_distributionHenvironmental_vectorCDP:ND/TD:H/CR:ND/IR:ND/AR:ND

Aliases

CVE-2015-6420

References

Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
url
Apache Commons Collections Java library insecurely deserializes data
advisory
Apache Commons Collections Java library insecurely deserializes data
advisory

Browse GCVE Records

73,443 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›