CVE-2015-4852 CISA KEV · Actively exploited
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
CVSS score
—
EPSS probability
%95.0
Risk score
—
Published
5 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Oracle Weblogic Server Deserialization RCE - Raw Object (Metasploit)
Makefile Go / Python
Oracle WebLogic Server 10.3.6.0 - Java Deserialization Remote Code Execution
Makefile Go / Python
Exploit-DB
Websphere/JBoss/OpenNMS/Symantec Endpoint Protection Manager - Java Deserialization Remote Code Execution
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2025-61882 Actively exploitedImproper authentication in Oracle Corporation Oracle Concurrent Processing
Workaround Public Exploits:10EPSS %100
9.8
CVE-2020-1938 Actively exploitedVulnerability in Apache Tomcat
Patch verified Public Exploits:12EPSS %99
9.8
CVE-2012-4681 Actively exploitedVulnerability in N/a
Workaround Public Exploits:3EPSS %99
9.8
CVE-2012-0507 Actively exploitedVulnerability in N/a
Partial patch Public Exploits:1EPSS %98
9.8
CVE-2018-1273 Actively exploitedCode injection in Spring By Pivotal Spring Framework
Patch verified Public Exploits:8EPSS %97
9.8
CVE-2026-35273 Actively exploitedVulnerability in Oracle Corporation PeopleSoft Enterprise PeopleTools
Workaround Public Exploits:4EPSS %97
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2015-4852"