CVE-2015-3253
N/A
Published: August 13, 2015 at 02:00 PM UTC
Updated: June 17, 2026 at 12:25 AM UTC
6 products affected across 2 vendorsWebCenter SitesRetail Service BackboneRetail Store Inventory Management
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 41%
Description
The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
1.7.01.7.0 beta_11.7.0 beta_21.7.0 rc11.7.0 rc21.7.11.7.101.7.111.7.21.7.31.7.41.7.51.7.61.7.71.7.81.7.91.8.01.8.0 beta_11.8.0 beta_21.8.0 beta_31.8.0 beta_41.8.0 rc11.8.0 rc21.8.0 rc31.8.0 rc41.8.11.8.21.8.31.8.41.8.51.8.61.8.71.8.81.8.91.9.01.9.0 beta_11.9.0 beta_31.9.0 beta_42.0.02.0.0 beta_12.0.0 beta_22.0.0 beta_32.0.0 rc12.0.0 rc22.0.0 rc32.0.0 rc42.0.12.0.22.0.32.0.42.0.52.0.62.0.72.0.82.1.02.1.0 beta_12.1.0 rc12.1.0 rc22.1.0 rc32.1.12.1.22.1.32.1.42.1.52.1.62.1.72.1.82.1.92.2.02.2.0 beta_12.2.0 beta_22.2.0 rc12.2.0 rc22.2.0 rc32.2.12.2.22.3.02.3.0 beta_12.3.0 beta_22.3.0 rc12.3.0 rc22.3.0 rc32.3.12.3.102.3.112.3.22.3.32.3.42.3.52.3.62.3.72.3.82.3.92.4.02.4.0 beta_12.4.0 beta_22.4.0 beta_32.4.0 beta_42.4.0 rc12.4.0 rc22.4.12.4.22.4.3
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://groovy-lang.org/security.html
- http://packetstormsecurity.com/files/132714/Apache-Groovy-2.4.3-Code-Execution.html
- http://rhn.redhat.com/errata/RHSA-2016-0066.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
References (23)
x_refsource_MISCMitigationThird Party AdvisoryVDB Entry
Source: [email protected]
http://packetstormsecurity.com/files/132714/Apache-Groovy-2.4.3-Code-Execution.htmlVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2016-0066.htmlx_refsource_CONFIRMPatchThird Party Advisory
Source: [email protected]
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlx_refsource_CONFIRM
Source: [email protected]
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlx_refsource_CONFIRMPatchThird Party Advisory
Source: [email protected]
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlx_refsource_CONFIRM
Source: [email protected]
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlx_refsource_CONFIRM
Source: [email protected]
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlQuick Info
StatusMODIFIED
CWE
CWE-74
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card