CVE-2015-6420
HighAdvisory
Published 15 Jun 2020In the index since 8 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.179
- 97th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 23
- of 17,781 indexed, latest versions
- Container images
- 24
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Insecure Deserialization in Apache Commons Collection
Carried by container images the latest versions of 23 of 17,781 indexed charts deploy, on 24 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| commons-collectionsmaven | 3.1, 3.2.1 | 3.2.2 | 22 |
| commons-collections4maven | 4.0 | 4.1 | 2 |
- OSV records
- GHSA-6hgm-866r-3cjv
Charts affected
23 by stars
Container images carrying it
24 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| geoservercloud/ | 5288f320cf36 | commons-collections | 3.2.2 | 2 |
| gradiant/ | c33d53913869 | commons-collections | 3.2.2 | 2 |
| apache/ | 8647309f95d1 | commons-collections4 | 4.1 | 1 |
| confluentinc/ | c87b1c07fb53 | commons-collections | 3.2.2 | 1 |
| dwimberger/ | 0c636e55eb82 | commons-collections | 3.2.2 | 1 |
| geoservercloud/ | 8c70ee06d5ab | commons-collections | 3.2.2 | 1 |
| graylog2/ | 8ff28c66e6c1 | commons-collections4 | 4.1 | 1 |
| gurolakman/ | 9abb3882bcbd | commons-collections | 3.2.2 | 1 |
| gurolakman/ | 6537e8ed8de8 | commons-collections | 3.2.2 | 1 |
| gurolakman/ | ce23b20a8a17 | commons-collections | 3.2.2 | 1 |
| gurolakman/ | b22e746edd5d | commons-collections | 3.2.2 | 1 |
| gurolakman/ | bf18525c5ad9 | commons-collections | 3.2.2 | 1 |
| gurolakman/ | 8739565c3ea2 | commons-collections | 3.2.2 | 1 |
| ibmcom/ | ce9d2a564273 | commons-collections | 3.2.2 | 1 |
| ibmcom/ | a6748792da26 | commons-collections | 3.2.2 | 1 |
| ibmcom/ | ab3fd1fdfa18 | commons-collections | 3.2.2 | 1 |
| ibmcom/ | e17bdccc5030 | commons-collections | 3.2.2 | 1 |
| kubebb/ | a3879931dfa1 | commons-collections | 3.2.2 | 1 |
| openkm/ | 3bc465a7461b | commons-collections | 3.2.2 | 1 |
| refar/ | e5490f050f9f | commons-collections | 3.2.2 | 1 |
| seldonio/ | ba81b17f00eb | commons-collections | 3.2.2 | 1 |
| seldonio/ | eea0d3f578ca | commons-collections | 3.2.2 | 1 |
| seldonio/ | 29e362bb1ba2 | commons-collections | 3.2.2 | 1 |
| xetusoss/ | 88f25242b9ee | commons-collections | 3.2.2 | 1 |