Vulnerability Intelligence Report
CVE-2015-3253
The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:44.30%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| apache | groovy | 1.7.0, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7, 1.7.8, 1.7.9, 1.7.10, 1.7.11, 1.8.0, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.8.6, 1.8.7, 1.8.8, 1.8.9, 1.9.0, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8, 2.1.9, 2.2.0, 2.2.1, 2.2.2, 2.3.0, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.3.6, 2.3.7, 2.3.8, 2.3.9, 2.3.10, 2.3.11, 2.4.0, 2.4.1, 2.4.2, 2.4.3 |
| oracle | health_sciences_clinical_development_center | 3.1.1, 3.1.2 |
| oracle | retail_order_broker_cloud_service | 4.1, 5.1, 5.2, 15.0 |
| oracle | retail_service_backbone | 13.0, 13.1, 13.2, 14.0, 14.1, 15.0 |
| oracle | retail_store_inventory_management | 13.2, 14.0, 14.1 |
| oracle | webcenter_sites | 11.1.1.8.0, 12.2.1 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
44.303%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Red Hat, Inc. · Vendor · USA |
| Reserved | 2015-04-10T00:00:00 |
| Published | 2015-08-13T14:00:00 |
| Patch Date | 2015-07-16 |
| Last Updated | 2024-08-06T05:39:32 |
Community Chatter & Buzz