Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2015-3253

The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
apache / groovy 1.7.1 1.7.1.x
apache / groovy 2.2.1 2.2.1.x
apache / groovy 1.8.4 1.8.4.x
apache / groovy 2.1.6 2.1.6.x
apache / groovy 2.3.0-beta_1 2.3.0-beta_1.x
apache / groovy 2.3.10 2.3.10.x
apache / groovy 2.0.3 2.0.3.x
apache / groovy 2.1.9 2.1.9.x
apache / groovy 2.4.3 2.4.3.x
apache / groovy 2.0.4 2.0.4.x
apache / groovy 2.0.0-beta_2 2.0.0-beta_2.x
apache / groovy 1.8.9 1.8.9.x
apache / groovy 2.0.0-beta_1 2.0.0-beta_1.x
apache / groovy 2.1.3 2.1.3.x
apache / groovy 2.3.2 2.3.2.x
apache / groovy 2.3.0-rc3 2.3.0-rc3.x
apache / groovy 2.1.5 2.1.5.x
apache / groovy 2.4.2 2.4.2.x
apache / groovy 2.3.5 2.3.5.x
apache / groovy 2.3.0-rc1 2.3.0-rc1.x
apache / groovy 2.4.1 2.4.1.x
apache / groovy 2.2.0-beta_1 2.2.0-beta_1.x
apache / groovy 1.8.5 1.8.5.x
apache / groovy 2.3.9 2.3.9.x
apache / groovy 2.3.4 2.3.4.x
apache / groovy 1.8.0-rc3 1.8.0-rc3.x
apache / groovy 2.4.0-rc2 2.4.0-rc2.x
apache / groovy 2.0.0-rc4 2.0.0-rc4.x
apache / groovy 1.8.2 1.8.2.x
apache / groovy 1.8.0-beta_1 1.8.0-beta_1.x
apache / groovy 1.7.7 1.7.7.x
apache / groovy 2.3.1 2.3.1.x
apache / groovy 2.1.0 2.1.0.x
apache / groovy 1.8.0-rc4 1.8.0-rc4.x
apache / groovy 1.9.0-beta_1 1.9.0-beta_1.x
apache / groovy 2.3.0-rc2 2.3.0-rc2.x
apache / groovy 1.7.0-rc1 1.7.0-rc1.x
apache / groovy 2.1.8 2.1.8.x
apache / groovy 1.9.0-beta_3 1.9.0-beta_3.x
apache / groovy 1.8.0-rc2 1.8.0-rc2.x
apache / groovy 2.4.0-beta_1 2.4.0-beta_1.x
apache / groovy 1.8.0-beta_4 1.8.0-beta_4.x
apache / groovy 1.7.6 1.7.6.x
apache / groovy 2.3.7 2.3.7.x
apache / groovy 2.4.0-beta_3 2.4.0-beta_3.x
apache / groovy 1.8.3 1.8.3.x
apache / groovy 2.0.0-rc2 2.0.0-rc2.x
apache / groovy 1.8.6 1.8.6.x
apache / groovy 2.4.0-rc1 2.4.0-rc1.x
apache / groovy 1.7.0-beta_1 1.7.0-beta_1.x
apache / groovy 2.0.5 2.0.5.x
apache / groovy 2.1.0-rc3 2.1.0-rc3.x
apache / groovy 2.0.8 2.0.8.x
apache / groovy 1.8.0 1.8.0.x
apache / groovy 2.2.2 2.2.2.x
apache / groovy 2.1.0-rc2 2.1.0-rc2.x
apache / groovy 1.9.0 1.9.0.x
apache / groovy 2.2.0-rc1 2.2.0-rc1.x
apache / groovy 1.8.0-beta_3 1.8.0-beta_3.x
apache / groovy 2.3.8 2.3.8.x
apache / groovy 1.9.0-beta_4 1.9.0-beta_4.x
apache / groovy 2.2.0-rc2 2.2.0-rc2.x
apache / groovy 2.0.0 2.0.0.x
apache / groovy 1.7.8 1.7.8.x
apache / groovy 2.1.0-rc1 2.1.0-rc1.x
apache / groovy 1.8.1 1.8.1.x
apache / groovy 1.7.4 1.7.4.x
apache / groovy 2.0.2 2.0.2.x
apache / groovy 2.2.0-rc3 2.2.0-rc3.x
apache / groovy 2.2.0 2.2.0.x
apache / groovy 1.7.9 1.7.9.x
apache / groovy 1.7.2 1.7.2.x
apache / groovy 2.0.0-rc1 2.0.0-rc1.x
apache / groovy 1.7.3 1.7.3.x
apache / groovy 2.3.0-beta_2 2.3.0-beta_2.x
apache / groovy 2.0.7 2.0.7.x
apache / groovy 1.7.0-beta_2 1.7.0-beta_2.x
apache / groovy 2.4.0-beta_4 2.4.0-beta_4.x
apache / groovy 2.1.2 2.1.2.x
apache / groovy 1.8.0-rc1 1.8.0-rc1.x
apache / groovy 2.0.0-rc3 2.0.0-rc3.x
apache / groovy 1.8.7 1.8.7.x
apache / groovy 2.4.0 2.4.0.x
apache / groovy 2.3.3 2.3.3.x
apache / groovy 2.3.11 2.3.11.x
apache / groovy 1.7.11 1.7.11.x
apache / groovy 2.0.1 2.0.1.x
apache / groovy 2.1.1 2.1.1.x
apache / groovy 1.7.0-rc2 1.7.0-rc2.x
apache / groovy 1.8.8 1.8.8.x
apache / groovy 2.1.7 2.1.7.x
apache / groovy 2.0.6 2.0.6.x
apache / groovy 2.3.6 2.3.6.x
apache / groovy 2.4.0-beta_2 2.4.0-beta_2.x
apache / groovy 1.7.10 1.7.10.x
apache / groovy 1.8.0-beta_2 1.8.0-beta_2.x
apache / groovy 2.3.0 2.3.0.x
apache / groovy 2.1.0-beta_1 2.1.0-beta_1.x
apache / groovy 2.0.0-beta_3 2.0.0-beta_3.x
apache / groovy 1.7.5 1.7.5.x
apache / groovy 2.1.4 2.1.4.x
apache / groovy 2.2.0-beta_2 2.2.0-beta_2.x
apache / groovy 1.7.0 1.7.0.x
oracle / retail_store_inventory_management 13.2 13.2.x
oracle / health_sciences_clinical_development_center 3.1.2 3.1.2.x
oracle / retail_service_backbone 13.0 13.0.x
oracle / retail_service_backbone 14.1 14.1.x
oracle / retail_service_backbone 13.2 13.2.x
oracle / retail_order_broker_cloud_service 5.1 5.1.x
oracle / retail_order_broker_cloud_service 4.1 4.1.x
oracle / retail_store_inventory_management 14.1 14.1.x
oracle / health_sciences_clinical_development_center 3.1.1 3.1.1.x
oracle / retail_order_broker_cloud_service 15.0 15.0.x
oracle / retail_store_inventory_management 14.0 14.0.x
oracle / retail_service_backbone 14.0 14.0.x
oracle / retail_service_backbone 13.1 13.1.x
oracle / retail_service_backbone 15.0 15.0.x
oracle / retail_order_broker_cloud_service 5.2 5.2.x
oracle / webcenter_sites 11.1.1.8.0 11.1.1.8.0.x
oracle / webcenter_sites 12.2.1 12.2.1.x
org.codehaus.groovy / groovy 1.7.0 2.4.4