{"schemaVersion":3,"id":"CVE-2015-7501","aliases":["MGASA-2016-0012","RHSA-2015:2500","RHSA-2015:2521","RHSA-2015:2522","RHSA-2015:2523","RHSA-2015:2535","RHSA-2015:2536","RHSA-2015:2671","RHSA-2020:4274","UBUNTU-CVE-2015-7501","DEBIAN-CVE-2015-7501","CGA-2wf6-2x7m-vq9x","CGA-3cv5-r56w-mc7x","CGA-3h8p-4j7x-qpg2","CGA-464g-m8h2-gvpf","CGA-4rgx-qc3p-9rhm","CGA-4vmx-mfwj-hj43","CGA-58qx-ccx6-m9xf","CGA-5hv8-8x5r-vwhf","CGA-5qg3-cw72-9jc3","CGA-6547-phrp-h7wx","CGA-6h7w-wcpj-h43c","CGA-7v4r-cw23-268p","CGA-82f2-x83w-7mrc","CGA-837g-9cw4-4pgv","CGA-856r-c7mc-vp56","CGA-8684-7xc7-5r93","CGA-8h44-g67j-fv56","CGA-8vm7-qcc8-4g8x","CGA-94pq-gch4-r8c5","CGA-9929-jxcv-4jf7","CGA-9hpp-4wwh-6vqp","CGA-9hxf-hcw6-867j","CGA-f5jj-633x-mwgh","CGA-f7pp-8wv6-fhcj","CGA-g354-jq56-6vvm","CGA-gjr5-79hf-xm4w","CGA-gpp9-wpvf-3g27","CGA-h3pq-g5ch-28rg","CGA-hv7v-x95x-2fhp","CGA-j2f9-85jr-wr9g","CGA-jqxf-h459-x2pr","CGA-jx5g-p689-8393","CGA-m248-fch6-pxv7","CGA-m2m9-x52h-4gh5","CGA-m7m2-qr69-7c9w","CGA-mcx6-pj6q-wr8m","CGA-pff3-7gmp-w3r6","GHSA-fjq5-5j5f-mvxh","CGA-q4hf-rgmv-gjpq","CGA-q4hx-rxcc-m9w9","CGA-rcmx-6g2c-4hqq","CGA-rf34-r9x2-ww98","CGA-rmf3-4x26-9vw7","CGA-rrcp-r758-8fcc","CGA-v9rv-88jx-67gc","CGA-vc2f-hc85-2695","CGA-vw6r-45p5-phm5"],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.","dates":{"published":"2017-11-09T00:00:00.000Z","modified":"2024-08-06T07:51:28.224Z","reserved":null,"kevAdded":["2025-07-14T00:00:00.000Z"],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":4.1,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":9.8,"severity":"critical","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":9.8,"severity":"critical","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Chainguard","score":9.8,"severity":"critical","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Maven","score":9.8,"severity":"critical","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true}]},"epss":{"probability":0.85562,"percentile":0.99723,"severity":"critical","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.85562},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.70081,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.85562,"percentile":0.99723}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.70081,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.85562,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.85562,"percentile":0.99723}]},"kev":{"state":"listed","entries":[{"source":"enisa","sourceLabel":"ENISA","dateAdded":"2025-07-14T00:00:00.000Z","dueDate":null,"requiredAction":null,"name":null,"description":"the system accepts serialized objects without verifying their origin or reliability allowing an attacker to send specially crafted payloads that are then deserialized and executed","notes":[{"type":"url","href":"https://www.acn.gov.it/portale/w/distribuzione-di-payload-malevoli-tramite-vulnerabilita-note","label":"www.acn.gov.it/portale/w/distribuzione-di-payload-malevoli-tramite-vulnerabilita-note"}],"vendor":"Apache","product":"Commons Collections library","ransomware":false,"ransomwareUse":null,"exploitationType":"unknown"}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":true,"entry":{"source":"enisa","sourceLabel":"ENISA","dateAdded":"2025-07-14T00:00:00.000Z","dueDate":null,"requiredAction":null,"name":null,"description":"the system accepts serialized objects without verifying their origin or reliability allowing an attacker to send specially crafted payloads that are then deserialized and executed","notes":[{"type":"url","href":"https://www.acn.gov.it/portale/w/distribuzione-di-payload-malevoli-tramite-vulnerabilita-note","label":"www.acn.gov.it/portale/w/distribuzione-di-payload-malevoli-tramite-vulnerabilita-note"}],"vendor":"Apache","product":"Commons Collections library","ransomware":false,"ransomwareUse":null,"exploitationType":"unknown"}},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-502","name":"Deserialization of Untrusted Data","description":"The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/502.html"}],"affected":[{"vendor":"chainguard","product":"eco-java-gradle-1.11","name":"eco-java-gradle-1.11","label":"eco-java-gradle-1.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-1.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.0","name":"eco-java-gradle-2.0","label":"eco-java-gradle-2.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.1","name":"eco-java-gradle-2.1","label":"eco-java-gradle-2.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.10","name":"eco-java-gradle-2.10","label":"eco-java-gradle-2.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.11","name":"eco-java-gradle-2.11","label":"eco-java-gradle-2.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.12","name":"eco-java-gradle-2.12","label":"eco-java-gradle-2.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.2","name":"eco-java-gradle-2.2","label":"eco-java-gradle-2.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.2.1","name":"eco-java-gradle-2.2.1","label":"eco-java-gradle-2.2.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.2.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.3","name":"eco-java-gradle-2.3","label":"eco-java-gradle-2.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.4","name":"eco-java-gradle-2.4","label":"eco-java-gradle-2.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.5","name":"eco-java-gradle-2.5","label":"eco-java-gradle-2.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.6","name":"eco-java-gradle-2.6","label":"eco-java-gradle-2.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.7","name":"eco-java-gradle-2.7","label":"eco-java-gradle-2.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.8","name":"eco-java-gradle-2.8","label":"eco-java-gradle-2.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"eco-java-gradle-2.9","name":"eco-java-gradle-2.9","label":"eco-java-gradle-2.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/eco-java-gradle-2.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.3.6","name":"hadoop-fips-3.3.6","label":"hadoop-fips-3.3.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.3.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.4.2","name":"hadoop-fips-3.4.2","label":"hadoop-fips-3.4.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.4.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.5","name":"hadoop-fips-3.5","label":"hadoop-fips-3.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"libcommons-collections3-java","name":"libcommons-collections3-java","label":"libcommons-collections3-java","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libcommons-collections3-java","purlType":"deb","versions":[{"text":"< 3.2.2-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.2-1","eol":null,"hubHref":null},{"vendor":"debian","product":"libcommons-collections4-java","name":"libcommons-collections4-java","label":"libcommons-collections4-java","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libcommons-collections4-java","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libcommons-collections3-java","name":"libcommons-collections3-java","label":"libcommons-collections3-java","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libcommons-collections3-java","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libcommons-collections4-java","name":"libcommons-collections4-java","label":"libcommons-collections4-java","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libcommons-collections4-java","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"mageia","product":"apache-commons-collections","name":"apache-commons-collections","label":"apache-commons-collections","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/apache-commons-collections","purlType":"rpm","versions":[{"text":"< 3.2.1-24.1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.1-24.1.mga5","eol":null,"hubHref":null},{"vendor":"commons-collections","product":"commons-collections","name":"commons-collections:commons-collections","label":"commons-collections","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/commons-collections/commons-collections","purlType":"maven","versions":[{"text":"< 3.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.2","eol":null,"hubHref":null},{"vendor":"net.sourceforge.collections","product":"collections-generic","name":"net.sourceforge.collections:collections-generic","label":"collections-generic","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/net.sourceforge.collections/collections-generic","purlType":"maven","versions":[{"text":"4.01","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.01","eol":null,"hubHref":null},{"vendor":"org.apache.commons","product":"commons-collections4","name":"org.apache.commons:commons-collections4","label":"commons-collections4","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.apache.commons/commons-collections4","purlType":"maven","versions":[{"text":"< 4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1","eol":null,"hubHref":null},{"vendor":"org.apache.servicemix.bundles","product":"org.apache.servicemix.bundles.collections-generic","name":"org.apache.servicemix.bundles:org.apache.servicemix.bundles.collections-generic","label":"org.apache.servicemix.bundles.collections-generic","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.collections-generic","purlType":"maven","versions":[{"text":"≥ 4.01","noFixRecorded":true,"fixedIn":null}],"versionsText":"≥ 4.01 (No fix recorded)","eol":null,"hubHref":null},{"vendor":"org.apache.servicemix.bundles","product":"org.apache.servicemix.bundles.commons-collections","name":"org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-collections","label":"org.apache.servicemix.bundles.commons-collections","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.commons-collections","purlType":"maven","versions":[{"text":"≥ 3.2.1","noFixRecorded":true,"fixedIn":null}],"versionsText":"≥ 3.2.1 (No fix recorded)","eol":null,"hubHref":null},{"vendor":"redhat","product":"data_grid","name":"data grid","label":"data_grid","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0.0","eol":null,"hubHref":"/vendor/redhat/data_grid"},{"vendor":"redhat","product":"jboss_a-mq","name":"jboss a-mq","label":"jboss_a-mq","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0.0","eol":null,"hubHref":"/vendor/redhat/jboss_a-mq"},{"vendor":"redhat","product":"jboss_bpm_suite","name":"jboss bpm suite","label":"jboss_bpm_suite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0.0","eol":null,"hubHref":"/vendor/redhat/jboss_bpm_suite"},{"vendor":"redhat","product":"jboss_data_virtualization","name":"jboss data virtualization","label":"jboss_data_virtualization","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.0.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0.0 | 6.0.0","eol":null,"hubHref":"/vendor/redhat/jboss_data_virtualization"},{"vendor":"redhat","product":"jboss_enterprise_application_platform","name":"jboss enterprise application platform","label":"jboss_enterprise_application_platform","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.3.0","noFixRecorded":false,"fixedIn":null},{"text":"5.0.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.3.0 | 5.0.0 | 6.0.0","eol":null,"hubHref":"/vendor/redhat/jboss_enterprise_application_platform"},{"vendor":"redhat","product":"jboss_enterprise_brms_platform","name":"jboss enterprise brms platform","label":"jboss_enterprise_brms_platform","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.0.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0.0 | 6.0.0","eol":null,"hubHref":"/vendor/redhat/jboss_enterprise_brms_platform"},{"vendor":"redhat","product":"jboss_enterprise_soa_platform","name":"jboss enterprise soa platform","label":"jboss_enterprise_soa_platform","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0.0","eol":null,"hubHref":"/vendor/redhat/jboss_enterprise_soa_platform"},{"vendor":"redhat","product":"jboss_enterprise_web_server","name":"jboss enterprise web server","label":"jboss_enterprise_web_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.0.0","eol":null,"hubHref":"/vendor/redhat/jboss_enterprise_web_server"},{"vendor":"redhat","product":"jboss_fuse","name":"jboss fuse","label":"jboss_fuse","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0.0","eol":null,"hubHref":"/vendor/redhat/jboss_fuse"},{"vendor":"redhat","product":"jboss_fuse_service_works","name":"jboss fuse service works","label":"jboss_fuse_service_works","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0","eol":null,"hubHref":"/vendor/redhat/jboss_fuse_service_works"},{"vendor":"redhat","product":"jboss_operations_network","name":"jboss operations network","label":"jboss_operations_network","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.0","eol":null,"hubHref":"/vendor/redhat/jboss_operations_network"},{"vendor":"redhat","product":"jboss_portal","name":"jboss portal","label":"jboss_portal","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0.0","eol":null,"hubHref":"/vendor/redhat/jboss_portal"},{"vendor":"redhat","product":"openshift","name":"openshift","label":"openshift","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.0","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"red-hat-openshift","label":"Red Hat OpenShift","category":"server-app"}},"hubHref":"/vendor/redhat/openshift"},{"vendor":"redhat","product":"subscription_asset_manager","name":"subscription asset manager","label":"subscription_asset_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.3.0","eol":null,"hubHref":"/vendor/redhat/subscription_asset_manager"},{"vendor":"redhat","product":"xpaas","name":"xpaas","label":"xpaas","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.0.0","eol":null,"hubHref":"/vendor/redhat/xpaas"},{"vendor":"redhat","product":"apache-commons-collections","name":"apache-commons-collections","label":"apache-commons-collections","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/apache-commons-collections","purlType":"rpm","versions":[{"text":"< 0:3.2.1-22.el7_2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-22.el7_2","eol":null,"hubHref":null},{"vendor":"redhat","product":"apache-commons-collections-eap6","name":"apache-commons-collections-eap6","label":"apache-commons-collections-eap6","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/apache-commons-collections-eap6","purlType":"rpm","versions":[{"text":"< 0:3.2.1-16.redhat_5.1.ep6.el5","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2.1-16.redhat_5.1.ep6.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2.1-16.redhat_5.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-16.redhat_5.1.ep6.el5 | < 0:3.2.1-16.redhat_5.1.ep6.el6 | < 0:3.2.1-16.redhat_5.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"apache-commons-collections-javadoc","name":"apache-commons-collections-javadoc","label":"apache-commons-collections-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/apache-commons-collections-javadoc","purlType":"rpm","versions":[{"text":"< 0:3.2.1-22.el7_2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-22.el7_2","eol":null,"hubHref":null},{"vendor":"redhat","product":"apache-commons-collections-testframework","name":"apache-commons-collections-testframework","label":"apache-commons-collections-testframework","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/apache-commons-collections-testframework","purlType":"rpm","versions":[{"text":"< 0:3.2.1-22.el7_2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-22.el7_2","eol":null,"hubHref":null},{"vendor":"redhat","product":"apache-commons-collections-testframework-javadoc","name":"apache-commons-collections-testframework-javadoc","label":"apache-commons-collections-testframework-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/apache-commons-collections-testframework-javadoc","purlType":"rpm","versions":[{"text":"< 0:3.2.1-22.el7_2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-22.el7_2","eol":null,"hubHref":null},{"vendor":"redhat","product":"jakarta-commons-collections","name":"jakarta-commons-collections","label":"jakarta-commons-collections","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jakarta-commons-collections","purlType":"rpm","versions":[{"text":"< 0:3.2.1-3.5.el6_7","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2.1-5.ep5.el4","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2.1-5.ep5.el5","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2.1-5.ep5.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2-2jpp.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-3.5.el6_7 | < 0:3.2.1-5.ep5.el4 | < 0:3.2.1-5.ep5.el5 | < 0:3.2.1-5.ep5.el6 | < 0:3.2-2jpp.4","eol":null,"hubHref":null},{"vendor":"redhat","product":"jakarta-commons-collections-debuginfo","name":"jakarta-commons-collections-debuginfo","label":"jakarta-commons-collections-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jakarta-commons-collections-debuginfo","purlType":"rpm","versions":[{"text":"< 0:3.2-2jpp.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2-2jpp.4","eol":null,"hubHref":null},{"vendor":"redhat","product":"jakarta-commons-collections-javadoc","name":"jakarta-commons-collections-javadoc","label":"jakarta-commons-collections-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jakarta-commons-collections-javadoc","purlType":"rpm","versions":[{"text":"< 0:3.2.1-3.5.el6_7","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2-2jpp.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-3.5.el6_7 | < 0:3.2-2jpp.4","eol":null,"hubHref":null},{"vendor":"redhat","product":"jakarta-commons-collections-testframework","name":"jakarta-commons-collections-testframework","label":"jakarta-commons-collections-testframework","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jakarta-commons-collections-testframework","purlType":"rpm","versions":[{"text":"< 0:3.2.1-3.5.el6_7","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2-2jpp.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-3.5.el6_7 | < 0:3.2-2jpp.4","eol":null,"hubHref":null},{"vendor":"redhat","product":"jakarta-commons-collections-testframework-javadoc","name":"jakarta-commons-collections-testframework-javadoc","label":"jakarta-commons-collections-testframework-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jakarta-commons-collections-testframework-javadoc","purlType":"rpm","versions":[{"text":"< 0:3.2.1-3.5.el6_7","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2-2jpp.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-3.5.el6_7 | < 0:3.2-2jpp.4","eol":null,"hubHref":null},{"vendor":"redhat","product":"jakarta-commons-collections-tomcat5","name":"jakarta-commons-collections-tomcat5","label":"jakarta-commons-collections-tomcat5","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jakarta-commons-collections-tomcat5","purlType":"rpm","versions":[{"text":"< 0:3.2.1-3.5.el6_7","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2.1-5.ep5.el4","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2.1-5.ep5.el5","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2.1-5.ep5.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2-2jpp.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-3.5.el6_7 | < 0:3.2.1-5.ep5.el4 | < 0:3.2.1-5.ep5.el5 | < 0:3.2.1-5.ep5.el6 | < 0:3.2-2jpp.4","eol":null,"hubHref":null},{"vendor":"redhat","product":"rh-java-common-apache-commons-collections","name":"rh-java-common-apache-commons-collections","label":"rh-java-common-apache-commons-collections","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/rh-java-common-apache-commons-collections","purlType":"rpm","versions":[{"text":"< 0:3.2.1-21.13.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2.1-21.13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-21.13.el6 | < 0:3.2.1-21.13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"rh-java-common-apache-commons-collections-javadoc","name":"rh-java-common-apache-commons-collections-javadoc","label":"rh-java-common-apache-commons-collections-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/rh-java-common-apache-commons-collections-javadoc","purlType":"rpm","versions":[{"text":"< 0:3.2.1-21.13.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2.1-21.13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-21.13.el6 | < 0:3.2.1-21.13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"rh-java-common-apache-commons-collections-testframework","name":"rh-java-common-apache-commons-collections-testframework","label":"rh-java-common-apache-commons-collections-testframework","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/rh-java-common-apache-commons-collections-testframework","purlType":"rpm","versions":[{"text":"< 0:3.2.1-21.13.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2.1-21.13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-21.13.el6 | < 0:3.2.1-21.13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"rh-java-common-apache-commons-collections-testframework-javadoc","name":"rh-java-common-apache-commons-collections-testframework-javadoc","label":"rh-java-common-apache-commons-collections-testframework-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/rh-java-common-apache-commons-collections-testframework-javadoc","purlType":"rpm","versions":[{"text":"< 0:3.2.1-21.13.el6","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.2.1-21.13.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.2.1-21.13.el6 | < 0:3.2.1-21.13.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"rh-maven35-apache-commons-collections4","name":"rh-maven35-apache-commons-collections4","label":"rh-maven35-apache-commons-collections4","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/rh-maven35-apache-commons-collections4","purlType":"rpm","versions":[{"text":"< 0:4.0-7.3.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.0-7.3.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"rh-maven35-apache-commons-collections4-javadoc","name":"rh-maven35-apache-commons-collections4-javadoc","label":"rh-maven35-apache-commons-collections4-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/rh-maven35-apache-commons-collections4-javadoc","purlType":"rpm","versions":[{"text":"< 0:4.0-7.3.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.0-7.3.el7","eol":null,"hubHref":null}],"affectedCount":60,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-0040.html","label":"rhn.redhat.com/errata/RHSA-2016-0040.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2670.html","label":"rhn.redhat.com/errata/RHSA-2015-2670.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2501.html","label":"rhn.redhat.com/errata/RHSA-2015-2501.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2517.html","label":"rhn.redhat.com/errata/RHSA-2015-2517.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","Advisory"]},{"url":"http://www.securityfocus.com/bid/78215","label":"www.securityfocus.com/bid/78215","hostname":"www.securityfocus.com","tags":["VDB Entry","Third Party Advisory","Advisory"]},{"url":"http://www.securitytracker.com/id/1034097","label":"www.securitytracker.com/id/1034097","hostname":"www.securitytracker.com","tags":["VDB Entry","Third Party Advisory","Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2671.html","label":"rhn.redhat.com/errata/RHSA-2015-2671.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","Advisory"]},{"url":"http://www.securitytracker.com/id/1037052","label":"www.securitytracker.com/id/1037052","hostname":"www.securitytracker.com","tags":["VDB Entry","Third Party Advisory","Advisory"]},{"url":"http://www.securitytracker.com/id/1037640","label":"www.securitytracker.com/id/1037640","hostname":"www.securitytracker.com","tags":["VDB Entry","Third Party Advisory","Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2522.html","label":"rhn.redhat.com/errata/RHSA-2015-2522.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2521.html","label":"rhn.redhat.com/errata/RHSA-2015-2521.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2516.html","label":"rhn.redhat.com/errata/RHSA-2015-2516.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2500.html","label":"rhn.redhat.com/errata/RHSA-2015-2500.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2514.html","label":"rhn.redhat.com/errata/RHSA-2015-2514.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2502.html","label":"rhn.redhat.com/errata/RHSA-2015-2502.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2015-2536.html","label":"rhn.redhat.com/errata/RHSA-2015-2536.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","label":"rhn.redhat.com/errata/RHSA-2016-1773.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","Advisory","WEB"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2524.html","label":"rhn.redhat.com/errata/RHSA-2015-2524.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","Advisory"]},{"url":"http://www.securitytracker.com/id/1037053","label":"www.securitytracker.com/id/1037053","hostname":"www.securitytracker.com","tags":["VDB Entry","Third Party Advisory","Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1279330","label":"bugzilla.redhat.com/show_bug.cgi?id=1279330","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry","Vendor Advisory","REPORT","Advisory","WEB"]},{"url":"https://access.redhat.com/solutions/2045023","label":"access.redhat.com/solutions/2045023","hostname":"access.redhat.com","tags":["Vendor Advisory","ARTICLE","Advisory","WEB"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","label":"www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","hostname":"www.oracle.com","tags":["Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","label":"www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","hostname":"www.oracle.com","tags":["Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","label":"www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","hostname":"www.oracle.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/vulnerabilities/2059393","label":"access.redhat.com/security/vulnerabilities/2059393","hostname":"access.redhat.com","tags":["Vendor Advisory","Advisory","WEB"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","label":"www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","hostname":"www.oracle.com","tags":["Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","label":"www.oracle.com/security-alerts/cpujul2020.html","hostname":"www.oracle.com","tags":["WEB"]},{"url":"https://security.netapp.com/advisory/ntap-20240216-0010/","label":"security.netapp.com/advisory/ntap-20240216-0010/","hostname":"security.netapp.com","tags":["Advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0012.html","label":"advisories.mageia.org/MGASA-2016-0012.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17227","label":"bugs.mageia.org/show_bug.cgi?id=17227","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://blogs.apache.org/foundation/entry/apache_commons_statement_to_widespread","label":"blogs.apache.org/foundation/entry/apache_commons_statement_to_widespread","hostname":"blogs.apache.org","tags":["WEB"]},{"url":"https://rhn.redhat.com/errata/RHSA-2015-2522.html","label":"rhn.redhat.com/errata/RHSA-2015-2522.html","hostname":"rhn.redhat.com","tags":["WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2500","label":"access.redhat.com/errata/RHSA-2015:2500","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2500.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2500.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7501","label":"access.redhat.com/security/cve/CVE-2015-7501","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7501","label":"www.cve.org/CVERecord?id=CVE-2015-7501","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7501","label":"nvd.nist.gov/vuln/detail/CVE-2015-7501","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/","label":"foxglovesecurity.com/2015/…","hostname":"foxglovesecurity.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2521","label":"access.redhat.com/errata/RHSA-2015:2521","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2521.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2521.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2522","label":"access.redhat.com/errata/RHSA-2015:2522","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2522.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2522.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2523","label":"access.redhat.com/errata/RHSA-2015:2523","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2523.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2523.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2535","label":"access.redhat.com/errata/RHSA-2015:2535","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2535.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2535.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2536","label":"access.redhat.com/errata/RHSA-2015:2536","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2536.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2536.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2671","label":"access.redhat.com/errata/RHSA-2015:2671","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2671.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2671.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4274","label":"access.redhat.com/errata/RHSA-2020:4274","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4274.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4274.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-7501","label":"ubuntu.com/security/CVE-2015-7501","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://issues.apache.org/jira/browse/COLLECTIONS-580","label":"issues.apache.org/jira/browse/COLLECTIONS-580","hostname":"issues.apache.org","tags":["REPORT"]},{"url":"https://github.com/apache/commons-collections/commit/1642b00d67b96de87cad44223efb9ab5b4fb7be5","label":"github.com/apache/commons-collections/commit/1642b00d67b96de87cad44223efb9ab5b4fb7be5","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/apache/commons-collections/commit/5ec476b0b756852db865b2e442180f091f8209ee","label":"github.com/apache/commons-collections/commit/5ec476b0b756852db865b2e442180f091f8209ee","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/apache/commons-collections/commit/bce4d022f27a723fa0e0b7484dcbf0afa2dd210a","label":"github.com/apache/commons-collections/commit/bce4d022f27a723fa0e0b7484dcbf0afa2dd210a","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/apache/commons-collections/commit/d9a00134f16d685bea11b2b12de824845e6473e3","label":"github.com/apache/commons-collections/commit/d9a00134f16d685bea11b2b12de824845e6473e3","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/apache/commons-collections/commit/e585cd0433ae4cfbc56e58572b9869bd0c86b611","label":"github.com/apache/commons-collections/commit/e585cd0433ae4cfbc56e58572b9869bd0c86b611","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/apache/commons-collections/commit/da1a5fe00d79e1840b7e52317933e9eb56e88246","label":"github.com/apache/commons-collections/commit/da1a5fe00d79e1840b7e52317933e9eb56e88246","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/apache/commons-collections/commit/3eee44cf63b1ebb0da6925e98b3dcc6ef1e4d610","label":"github.com/apache/commons-collections/commit/3eee44cf63b1ebb0da6925e98b3dcc6ef1e4d610","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/apache/commons-collections/commit/78d47d4d098ab814a7a00a0b1c81646b27f050cf","label":"github.com/apache/commons-collections/commit/78d47d4d098ab814a7a00a0b1c81646b27f050cf","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/apache/commons-collections/commit/b2b8f4adc557e4ef1ee2fe5e0ab46866c06ec55b","label":"github.com/apache/commons-collections/commit/b2b8f4adc557e4ef1ee2fe5e0ab46866c06ec55b","hostname":"github.com","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-7501","label":"security-tracker.debian.org/tracker/CVE-2015-7501","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://arxiv.org/pdf/2306.05534.pdf","label":"arxiv.org/pdf/2306.05534.pdf","hostname":"arxiv.org","tags":["WEB"]},{"url":"https://commons.apache.org/proper/commons-collections/release_4_1.html","label":"commons.apache.org/proper/commons-collections/release_4_1.html","hostname":"commons.apache.org","tags":["WEB"]},{"url":"https://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability","label":"foxglovesecurity.com/2015/…","hostname":"foxglovesecurity.com","tags":["WEB"]},{"url":"https://github.com/apache/commons-collections","label":"github.com/apache/commons-collections","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/jensdietrich/xshady-release/tree/main/CVE-2015-7501","label":"github.com/jensdietrich/xshady-release/tree/main/CVE-2015-7501","hostname":"github.com","tags":["WEB"]},{"url":"https://issues.apache.org/jira/browse/COLLECTIONS-580.","label":"issues.apache.org/jira/browse/COLLECTIONS-580.","hostname":"issues.apache.org","tags":["WEB"]},{"url":"https://sourceforge.net/p/collections/code/HEAD/tree","label":"sourceforge.net/p/collections/code/HEAD/tree","hostname":"sourceforge.net","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["RHSA-2015:2538","RHSA-2015:2539","RHSA-2015:2540","RHSA-2015:2542","RHSA-2016:1773"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-11-09T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T07:51:28.224Z","label":"Last modified","detail":"Vulnerability information updated.","source":null},{"kind":"kev-added","date":"2025-07-14T00:00:00.000Z","label":"Added to ENISA KEV","detail":"Added to the ENISA known exploited vulnerabilities catalog.","source":"enisa"}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T08:32:02.756Z","stale":false,"partial":false}}