CISA Known Exploited Vulnerability

CVE-2015-7450

IBM · WebSphere Application Server and Server Hypervisor Edition

IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.

Date added 2022-01-10

BOD 22-01 due date 2022-07-10

CWE CWE-94

Ransomware Unknown

CISA description

Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands

Required action

Apply updates per vendor instructions.

Notes & references

https://nvd.nist.gov/vuln/detail/CVE-2015-7450

Where this lands in 800-53

Vulnerability data triggers these controls during assessment and continuous monitoring.

RA-5 · Vulnerability Monitoring and Scanning
SI-2 · Flaw Remediation
CM-6 · Configuration Settings
SI-7 · Software, Firmware, and Information Integrity
CM-8 · System Component Inventory

External lookups

NVD · CVE-2015-7450
CVE.org · CVE-2015-7450
CISA KEV catalog (canonical)