View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2016-2510 severity critical: SUSE including 25 source package names (bsh2-2.0-318.1, bsh2-2.0.0.b5-3.2, …), 51 product×package rows across 17 product lines (SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15 SP1, … (17 product lines)): Fixed 51.
BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.