CVE-2015-3253 in Communications Converged Application Server Service Controllerinfo

Summary

The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

04/10/2015

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
153301	Oracle Communications Converged Application Server Service Controller Admin Console injection	74	Not defined	Official fix	CVE-2015-3253
133587	Oracle Data Integrator Apache Groovy injection	74	Not defined	Official fix	CVE-2015-3253
111953	Oracle Communications BRM Elastic Charging injection	74	Not defined	Official fix	CVE-2015-3253
108013	Oracle Communications WebRTC Session Controller Apache Groovy injection	74	Not defined	Official fix	CVE-2015-3253
103904	Oracle Communications BRM Apache Groovy injection	74	Not defined	Official fix	CVE-2015-3253
103787	Oracle Enterprise Data Quality Apache Groovy injection	74	Not defined	Official fix	CVE-2015-3253
95554	Oracle Big Data Graph Spatial injection	74	Not defined	Official fix	CVE-2015-3253
92996	Oracle Retail Merchandising Insights Security injection	74	Not defined	Official fix	CVE-2015-3253
92995	Oracle Retail Customer Insights Security injection	74	Not defined	Official fix	CVE-2015-3253
92994	Oracle Commerce Platform Dynamo Application injection	74	Not defined	Official fix	CVE-2015-3253
92964	Oracle Agile PLM Event Java PX injection	74	Not defined	Official fix	CVE-2015-3253
92780	Oracle Big Data Discovery Data Processing injection	74	Not defined	Official fix	CVE-2015-3253
90030	Oracle Retail Store Inventory Management SIMINT injection	74	Not defined	Official fix	CVE-2015-3253
90029	Oracle Retail Service Backbone Install injection	74	Not defined	Official fix	CVE-2015-3253
90028	Oracle Retail Order Broker System Administration injection	74	Not defined	Official fix	CVE-2015-3253
90014	Oracle Health Sciences Clinical Development Center Installation/configuration injection	74	Not defined	Official fix	CVE-2015-3253
82590	Oracle WebCenter Sites injection	74	Not defined	Official fix	CVE-2015-3253
77083	Apache Groovy MethodClosure.java MethodClosure injection	74	Not defined	Not defined	CVE-2015-3253

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

Sources

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!