VULNERABILITY INTELLIGENCE
CVE-2015-2828
CVSS score9 HIGH
EPSS probability3.24%
CISA KEVNot currently listed
Published2015-04-08
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Description
CA Spectrum 9.2.x and 9.3.x before 9.3 H02 does not properly validate serialized Java objects, which allows remote authenticated users to obtain administrative privileges via crafted object data.