What is RHSA-2015:2537?

RHSA-2015:2537 is a security advisory published by Red Hat Product Security with Critical severity. Red Hat Security Advisory: Red Hat JBoss Portal 6.2.0 commons-collections security update

Which CVE IDs does RHSA-2015:2537 cover?

RHSA-2015:2537 covers the following CVE IDs: CVE-2015-7501. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2015:2537?

RHSA-2015:2537 affects 1 product, including: Red Hat JBoss Portal 6.2.

RHSA-2015:2537Critical

Red Hat Security Advisory: Red Hat JBoss Portal 6.2.0 commons-collections security update

Vendor

Red Hat Product Security

Published

December 1, 2015

Last Modified

November 7, 2026

🔗 CVE IDs covered (1)

CVE-2015-7501 →

📋 Description

CVE-2015-7501 — apache-commons-collections: InvokerTransformer code execution during deserialisation

🎯 Affected products1

Red Hat JBoss Portal 6.2

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up all applications deployed on JBoss Enterprise Portal Platform, along with all databases, database settings, and customized configuration files.

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2015:2537
externalhttps://access.redhat.com/security/updates/classification/#critical
externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jbportal&downloadType=securityPatches&version=6.2.0
externalhttps://access.redhat.com/solutions/2045023
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1279330
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2537.json