Approved changes feed: RSS · Atom

cpe:2.3:a:apache:commons_collections:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductCommons Collections (97e7506a-2d6f-55a2-84b7-7a88ba8be599)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/commons purl2cpe 2026-06-01 10:14:31.975900
pkg:github/apache/commons-collections purl2cpe 2026-06-01 10:14:31.975903
pkg:gitlab/redhat/apache-commons-collections purl2cpe 2026-06-01 10:14:31.975906
pkg:maven/org.apache.commons/commons-collections4 purl2cpe 2026-06-01 10:14:31.975909
pkg:rpm/fedora/apache-commons-collections purl2cpe 2026-06-01 10:14:31.975911
pkg:rpm/opensuse/apache-commons-collections purl2cpe 2026-06-01 10:14:31.975914

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-6420 vulnerable 2026-06-08 05:06:52.386960 Details available
Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Published: 2015-12-15T02:00:00.000Z
Updated: 2025-03-25T16:42:10.313Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.