CVE-2014-9515: Dozer Project Dozer

Critical severity, CVSS 9.8. EPSS: 5.8% chance of exploitation in the next 30 days.

Dozer improperly uses a reflection-based approach to type conversion, which might allow remote attackers to execute arbitrary code via a crafted serialized object.

Affected products

• Dozer Project Dozer: up to and including 5.5.1

Published 2017-12-29. Last modified 2026-06-17.