Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade jakarta-commons-collections-javadocUpgrade jakarta-commons-collections-testframework-javadocUpgrade jakarta-commons-collections-testframeworkUpgrade jakarta-commons-collections-tomcat5Upgrade jakarta-commons-collections | Aug 17, 2018 | Dec 14, 2015 |
| Debian | — | Upgrade libcommons-collections3-java | Jul 30, 2024 | Nov 9, 2017 |
| Http Jboss | — | — | Dec 1, 2015 | Nov 6, 2015 |
| Oracle Solaris | — | Upgrade library/java/commons-collections to version 3.2.1-0.175.3.10.0.1.0 on Solaris 11.3 | May 29, 2017 | May 29, 2017 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 24286148 for version 12.2.1.0.0.Apply the Patch Set Update (PSU) 23743997 for version 10.3.6.0.0.Apply the Patch Set Update (PSU) 23744018 for version 12.1.3.0.0. | Apr 5, 2018 | Nov 9, 2017 |
| Oracle_linux | — | Upgrade apache-commons-collections-javadocUpgrade jakarta-commons-collectionsUpgrade apache-commons-collections-testframeworkUpgrade apache-commons-collections-testframework-javadocUpgrade jakarta-commons-collections-testframeworkUpgrade apache-commons-collectionsUpgrade jakarta-commons-collections-tomcat5Upgrade jakarta-commons-collections-javadocUpgrade jakarta-commons-collections-testframework-javadoc | Oct 16, 2024 | Nov 9, 2017 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Nov 6, 2015 |
| Red_hat Jboss_eap | — | — | Nov 14, 2019 | Nov 9, 2017 |
| Redhat Openshift | — | Upgrade openshift-origin-cartridge-jenkins-clientUpgrade openshift-origin-node-proxyUpgrade ImageMagickUpgrade openshift-origin-node-utilUpgrade openshift-origin-broker-utilUpgrade activemqUpgrade rubygem-openshift-origin-controllerUpgrade openshift-origin-cartridge-phpUpgrade openshift-origin-cartridge-nodejsUpgrade rubygem-openshift-origin-frontend-haproxy-sni-proxyUpgrade openshift-origin-brokerUpgrade openshift-origin-cartridge-mongodbUpgrade openshift-origin-cartridge-jenkinsUpgrade openshift-origin-cartridge-perlUpgrade openshift-origin-cartridge-rubyUpgrade openshift-origin-cartridge-jbossewsUpgrade rubygem-openshift-origin-nodeUpgrade jenkinsUpgrade openshift-origin-cartridge-mysqlUpgrade rubygem-openshift-origin-admin-consoleUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade openshift-origin-cartridge-cronUpgrade openshift-origin-cartridge-diyUpgrade openshift-origin-cartridge-jbosseapUpgrade openshift-origin-cartridge-pythonUpgrade openshift-origin-cartridge-haproxyUpgrade rubygem-openshift-origin-routing-daemonUpgrade rhcUpgrade openshift-origin-msg-node-mcollectiveUpgrade libcgroup | Oct 8, 2019 | Nov 6, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub