Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2015-3253

45
FAUCET Score

CVE-2015-3253 is a critical deserialization vulnerability in the MethodClosure class of Apache Groovy versions 1.7.0 through 2.4.3, also impacting Oracle products that utilize affected Groovy versions. With a CVSS score of 9.8 (CRITICAL), this vulnerability allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service with low attack complexity. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion and media coverage, primarily in the context of Oracle's critical patch updates.

Impacted Technologies

VendorProductVersion(s)CPE
1.7.0CPE matchmatch criteria
cpe:2.3:a:apache:groovy:1.7.0:*:*:*:*:*:*:*
1.7.0CPE matchmatch criteria
cpe:2.3:a:apache:groovy:1.7.0:beta_1:*:*:*:*:*:*
1.7.0CPE matchmatch criteria
cpe:2.3:a:apache:groovy:1.7.0:beta_2:*:*:*:*:*:*
1.7.0CPE matchmatch criteria
cpe:2.3:a:apache:groovy:1.7.0:rc1:*:*:*:*:*:*
1.7.0CPE matchmatch criteria
cpe:2.3:a:apache:groovy:1.7.0:rc2:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

9.8CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.0

Exploit Intelligence

EPSS Score
41.03%
Probability of exploitation in next 30 days
EPSS Percentile
98.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.4103 is in the 96th percentile among its peer group of 36,829 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (21)

mavenpatch availablevia ghsa
Product: org.codehaus.groovy:groovy-allFixed in: 2.4.4
mavenpatch availablevia ghsa
Product: org.codehaus.groovy:groovyFixed in: 2.4.4
oraclepatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Data Virtualization 6.2Fixed in: groovy-all
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Fuse 6.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Fuse Service Works 6.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Operations Network 3.3Fixed in: groovy-all
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss SOA Platform 5.3Fixed in: grovy-all
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: rh-maven33-groovy-0:1.8.9-7.19.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-maven33-groovy-0:1.8.9-7.19.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.3 EUSFixed in: rh-maven33-groovy-0:1.8.9-7.19.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: rh-maven33-groovy-0:1.8.9-7.19.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: groovy-0:1.8.9-8.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss A-MQ 6.2
View patch
redhatno patchvia redhat_api
Product: Red Hat JBoss Fuse Service Works 6Fixed in: groovy-all
redhatno patchvia redhat_api
Product: Red Hat Enterprise Virtualization 3Fixed in: jasperreports-server-pro
redhatno patchvia redhat_api
Product: Red Hat JBoss Portal 6Fixed in: groovy-all
redhatend of lifevia redhat_api
Product: Red Hat JBoss SOA Platform 4Fixed in: groovy-all
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Enterprise 2Fixed in: jenkins
redhatend of lifevia redhat_api
Product: Red Hat JBoss BRMS 5Fixed in: groovy-all
redhatend of lifevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 5Fixed in: groovy-all

Vendor Advisories (2)

mavenGHSA-qg25-hgjv-cg9qcritical

Improper Neutralization of Special Elements in Output Used by a Downstream Component in Apache Groovy

May 13, 2022
redhatCVE-2015-3253Important

groovy: remote execution of untrusted code in class MethodClosure

Jul 16, 2015

References

groovy-lang.org / security.html
Vendor Advisory
packetstormsecurity.com / files/132714/Apache-Groovy-2.4.3-Code-Execution.html
MitigationThird Party AdvisoryVDB Entry
rhn.redhat.com / errata/RHSA-2016-0066.html
access.redhat.com / errata/RHSA-2016:1376
access.redhat.com / errata/RHSA-2017:2486
access.redhat.com / errata/RHSA-2017:2596
h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay
lists.apache.org / thread.html/rbb8e16cc5acab183124572b655bdf5fe1d5b5f477dc267352426c7ed%40%3Cnotifications.shardingsphere.apache.org%3E
security.gentoo.org / glsa/201610-01
security.netapp.com / advisory/ntap-20160623-0001
oracle.com / security-alerts/cpuapr2020.html
oracle.com / technetwork/security-advisory/cpuapr2019-5072813.html
oracle.com / technetwork/security-advisory/cpuapr2016v3-2985753.html
PatchThird Party Advisory
oracle.com / technetwork/security-advisory/cpujan2018-3236628.html
oracle.com / technetwork/security-advisory/cpujul2016-2881720.html
PatchThird Party Advisory
oracle.com / technetwork/security-advisory/cpujul2017-3236622.html
oracle.com / technetwork/security-advisory/cpuoct2016-2881722.html
oracle.com / technetwork/security-advisory/cpuoct2017-3236626.html
securityfocus.com / archive/1/536012/100/0/threaded
securityfocus.com / bid/75919
Third Party AdvisoryVDB Entry
securityfocus.com / bid/91787
Third Party AdvisoryVDB Entry
securitytracker.com / id/1034815
zerodayinitiative.com / advisories/ZDI-15-365
Third Party AdvisoryVDB Entry