CVE-2015-4852
OR
Oracle WebLogic Server
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
What it is
Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code execution.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Oracle entries on the list
- HTTP Server and Oracle Weblogic Server Proxy Plug-in Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CVE-2026-21962 · Aug 24, 2026
- E-Business Suite Oracle E-Business Suite Improper Privilege Management Vulnerability CVE-2026-46817 · Jul 15, 2026
- PeopleSoft Enterprise PeopleTools Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CVE-2026-35273 · Jun 12, 2026
- WebLogic Server Oracle WebLogic Server Unspecified Vulnerability CVE-2024-21182 · Jun 1, 2026
- Fusion Middleware Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability CVE-2025-61757 · Nov 21, 2025
- E-Business Suite Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability CVE-2025-61884 · Oct 20, 2025