CVE Listesine Dön
CVE-2015-4495 CISA KEV · Aktif Sömürülüyor

Mozilla: Same origin violation and local file stealing via PDF reader (MFSA 2015-78)

CVSS Skor

4.3

EPSS İhtimal

%68.6

Risk Skoru

5.9

Yayın

11 yıl önce

Overview (Genel Bakış)Public Exploits (0)Newsroom (Haberler)Vulnerability Timeline
Resmî yama doğrulandı

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Envanterimdeki Etkisi

Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.

Oturum kontrol ediliyor…

Zafiyet Açıklaması

DayBreach CVE AI Araştırması

CVE-2015-4495 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.

A flaw was discovered in Mozilla Firefox that could be used to violate the same-origin policy and inject web script into a non-privileged part of the built-in PDF file viewer (PDF.js). An attacker could create a malicious web page that, when viewed by a victim, could steal arbitrary files (including private SSH keys, the /etc/passwd file, and other potentially sensitive files) from the system running Firefox.

IMPACT — Etkilenen Ürünler ve Yazılımlar

Affected Products

The following products are affected by CVE-2015-4495 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.

IDVENDORPRODUCTACTION
1Red Hat5Client-5.11.Z:firefox-0:38.1.1-1.el5_11.i386 İncele
2Red Hat5Client-5.11.Z:firefox-0:38.1.1-1.el5_11.ppc64 İncele
3Red Hat5Client-5.11.Z:firefox-0:38.1.1-1.el5_11.s390 İncele
4Red Hat5Client-5.11.Z:firefox-0:38.1.1-1.el5_11.s390x İncele
5Red Hat5Client-5.11.Z:firefox-0:38.1.1-1.el5_11.src İncele
6Red Hat5Client-5.11.Z:firefox-0:38.1.1-1.el5_11.x86_64 İncele
7Red Hat5Client-5.11.Z:firefox-debuginfo-0:38.1.1-1.el5_11.i386 İncele
8Red Hat5Client-5.11.Z:firefox-debuginfo-0:38.1.1-1.el5_11.ppc64 İncele
9Red Hat5Client-5.11.Z:firefox-debuginfo-0:38.1.1-1.el5_11.s390 İncele
10Red Hat5Client-5.11.Z:firefox-debuginfo-0:38.1.1-1.el5_11.s390x İncele
11Red Hat5Client-5.11.Z:firefox-debuginfo-0:38.1.1-1.el5_11.x86_64 İncele
12Red Hat5Server-5.11.Z:firefox-0:38.1.1-1.el5_11.i386 İncele
13Red Hat5Server-5.11.Z:firefox-0:38.1.1-1.el5_11.ppc64 İncele
14Red Hat5Server-5.11.Z:firefox-0:38.1.1-1.el5_11.s390 İncele
15Red Hat5Server-5.11.Z:firefox-0:38.1.1-1.el5_11.s390x İncele
16Red Hat5Server-5.11.Z:firefox-0:38.1.1-1.el5_11.src İncele
17Red Hat5Server-5.11.Z:firefox-0:38.1.1-1.el5_11.x86_64 İncele
18Red Hat5Server-5.11.Z:firefox-debuginfo-0:38.1.1-1.el5_11.i386 İncele
19Red Hat5Server-5.11.Z:firefox-debuginfo-0:38.1.1-1.el5_11.ppc64 İncele
20Red Hat5Server-5.11.Z:firefox-debuginfo-0:38.1.1-1.el5_11.s390 İncele
21Red Hat5Server-5.11.Z:firefox-debuginfo-0:38.1.1-1.el5_11.s390x İncele
22Red Hat5Server-5.11.Z:firefox-debuginfo-0:38.1.1-1.el5_11.x86_64 İncele
23Red Hat6Client-6.7.z:firefox-0:38.1.1-1.el6_7.i686 İncele
24Red Hat6Client-6.7.z:firefox-0:38.1.1-1.el6_7.ppc İncele
25Red Hat6Client-6.7.z:firefox-0:38.1.1-1.el6_7.ppc64 İncele
26Red Hat6Client-6.7.z:firefox-0:38.1.1-1.el6_7.s390 İncele
27Red Hat6Client-6.7.z:firefox-0:38.1.1-1.el6_7.s390x İncele
28Red Hat6Client-6.7.z:firefox-0:38.1.1-1.el6_7.src İncele
29Red Hat6Client-6.7.z:firefox-0:38.1.1-1.el6_7.x86_64 İncele
30Red Hat6Client-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.i686 İncele
31Red Hat6Client-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.ppc İncele
32Red Hat6Client-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.ppc64 İncele
33Red Hat6Client-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.s390 İncele
34Red Hat6Client-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.s390x İncele
35Red Hat6Client-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.x86_64 İncele
36Red Hat6Client-optional-6.7.z:firefox-0:38.1.1-1.el6_7.i686 İncele
37Red Hat6Client-optional-6.7.z:firefox-0:38.1.1-1.el6_7.ppc İncele
38Red Hat6Client-optional-6.7.z:firefox-0:38.1.1-1.el6_7.ppc64 İncele
39Red Hat6Client-optional-6.7.z:firefox-0:38.1.1-1.el6_7.s390 İncele
40Red Hat6Client-optional-6.7.z:firefox-0:38.1.1-1.el6_7.s390x İncele
41Red Hat6Client-optional-6.7.z:firefox-0:38.1.1-1.el6_7.src İncele
42Red Hat6Client-optional-6.7.z:firefox-0:38.1.1-1.el6_7.x86_64 İncele
43Red Hat6Client-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.i686 İncele
44Red Hat6Client-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.ppc İncele
45Red Hat6Client-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.ppc64 İncele
46Red Hat6Client-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.s390 İncele
47Red Hat6Client-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.s390x İncele
48Red Hat6Client-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.x86_64 İncele
49Red Hat6ComputeNode-optional-6.7.z:firefox-0:38.1.1-1.el6_7.i686 İncele
50Red Hat6ComputeNode-optional-6.7.z:firefox-0:38.1.1-1.el6_7.ppc İncele
51Red Hat6ComputeNode-optional-6.7.z:firefox-0:38.1.1-1.el6_7.ppc64 İncele
52Red Hat6ComputeNode-optional-6.7.z:firefox-0:38.1.1-1.el6_7.s390 İncele
53Red Hat6ComputeNode-optional-6.7.z:firefox-0:38.1.1-1.el6_7.s390x İncele
54Red Hat6ComputeNode-optional-6.7.z:firefox-0:38.1.1-1.el6_7.src İncele
55Red Hat6ComputeNode-optional-6.7.z:firefox-0:38.1.1-1.el6_7.x86_64 İncele
56Red Hat6ComputeNode-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.i686 İncele
57Red Hat6ComputeNode-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.ppc İncele
58Red Hat6ComputeNode-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.ppc64 İncele
59Red Hat6ComputeNode-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.s390 İncele
60Red Hat6ComputeNode-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.s390x İncele
61Red Hat6ComputeNode-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.x86_64 İncele
62Red Hat6Server-6.7.z:firefox-0:38.1.1-1.el6_7.i686 İncele
63Red Hat6Server-6.7.z:firefox-0:38.1.1-1.el6_7.ppc İncele
64Red Hat6Server-6.7.z:firefox-0:38.1.1-1.el6_7.ppc64 İncele
65Red Hat6Server-6.7.z:firefox-0:38.1.1-1.el6_7.s390 İncele
66Red Hat6Server-6.7.z:firefox-0:38.1.1-1.el6_7.s390x İncele
67Red Hat6Server-6.7.z:firefox-0:38.1.1-1.el6_7.src İncele
68Red Hat6Server-6.7.z:firefox-0:38.1.1-1.el6_7.x86_64 İncele
69Red Hat6Server-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.i686 İncele
70Red Hat6Server-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.ppc İncele
71Red Hat6Server-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.ppc64 İncele
72Red Hat6Server-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.s390 İncele
73Red Hat6Server-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.s390x İncele
74Red Hat6Server-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.x86_64 İncele
75Red Hat6Server-optional-6.7.z:firefox-0:38.1.1-1.el6_7.i686 İncele
76Red Hat6Server-optional-6.7.z:firefox-0:38.1.1-1.el6_7.ppc İncele
77Red Hat6Server-optional-6.7.z:firefox-0:38.1.1-1.el6_7.ppc64 İncele
78Red Hat6Server-optional-6.7.z:firefox-0:38.1.1-1.el6_7.s390 İncele
79Red Hat6Server-optional-6.7.z:firefox-0:38.1.1-1.el6_7.s390x İncele
80Red Hat6Server-optional-6.7.z:firefox-0:38.1.1-1.el6_7.src İncele
81Red Hat6Server-optional-6.7.z:firefox-0:38.1.1-1.el6_7.x86_64 İncele
82Red Hat6Server-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.i686 İncele
83Red Hat6Server-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.ppc İncele
84Red Hat6Server-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.ppc64 İncele
85Red Hat6Server-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.s390 İncele
86Red Hat6Server-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.s390x İncele
87Red Hat6Server-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.x86_64 İncele
88Red Hat6Workstation-6.7.z:firefox-0:38.1.1-1.el6_7.i686 İncele
89Red Hat6Workstation-6.7.z:firefox-0:38.1.1-1.el6_7.ppc İncele
90Red Hat6Workstation-6.7.z:firefox-0:38.1.1-1.el6_7.ppc64 İncele
91Red Hat6Workstation-6.7.z:firefox-0:38.1.1-1.el6_7.s390 İncele
92Red Hat6Workstation-6.7.z:firefox-0:38.1.1-1.el6_7.s390x İncele
93Red Hat6Workstation-6.7.z:firefox-0:38.1.1-1.el6_7.src İncele
94Red Hat6Workstation-6.7.z:firefox-0:38.1.1-1.el6_7.x86_64 İncele
95Red Hat6Workstation-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.i686 İncele
96Red Hat6Workstation-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.ppc İncele
97Red Hat6Workstation-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.ppc64 İncele
98Red Hat6Workstation-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.s390 İncele
99Red Hat6Workstation-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.s390x İncele
100Red Hat6Workstation-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.x86_64 İncele
101Red Hat6Workstation-optional-6.7.z:firefox-0:38.1.1-1.el6_7.i686 İncele
102Red Hat6Workstation-optional-6.7.z:firefox-0:38.1.1-1.el6_7.ppc İncele
103Red Hat6Workstation-optional-6.7.z:firefox-0:38.1.1-1.el6_7.ppc64 İncele
104Red Hat6Workstation-optional-6.7.z:firefox-0:38.1.1-1.el6_7.s390 İncele
105Red Hat6Workstation-optional-6.7.z:firefox-0:38.1.1-1.el6_7.s390x İncele
106Red Hat6Workstation-optional-6.7.z:firefox-0:38.1.1-1.el6_7.src İncele
107Red Hat6Workstation-optional-6.7.z:firefox-0:38.1.1-1.el6_7.x86_64 İncele
108Red Hat6Workstation-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.i686 İncele
109Red Hat6Workstation-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.ppc İncele
110Red Hat6Workstation-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.ppc64 İncele
111Red Hat6Workstation-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.s390 İncele
112Red Hat6Workstation-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.s390x İncele
113Red Hat6Workstation-optional-6.7.z:firefox-debuginfo-0:38.1.1-1.el6_7.x86_64 İncele
114Red Hat7Client-7.1.Z:firefox-0:38.1.1-1.el7_1.i686 İncele
115Red Hat7Client-7.1.Z:firefox-0:38.1.1-1.el7_1.ppc İncele
116Red Hat7Client-7.1.Z:firefox-0:38.1.1-1.el7_1.ppc64 İncele
117Red Hat7Client-7.1.Z:firefox-0:38.1.1-1.el7_1.s390 İncele
118Red Hat7Client-7.1.Z:firefox-0:38.1.1-1.el7_1.s390x İncele
119Red Hat7Client-7.1.Z:firefox-0:38.1.1-1.el7_1.src İncele
120Red Hat7Client-7.1.Z:firefox-0:38.1.1-1.el7_1.x86_64 İncele
121Red Hat7Client-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.i686 İncele
122Red Hat7Client-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.ppc İncele
123Red Hat7Client-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.ppc64 İncele
124Red Hat7Client-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.s390 İncele
125Red Hat7Client-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.s390x İncele
126Red Hat7Client-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.x86_64 İncele
127Red Hat7Client-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.i686 İncele
128Red Hat7Client-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.ppc İncele
129Red Hat7Client-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.ppc64 İncele
130Red Hat7Client-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.s390 İncele
131Red Hat7Client-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.s390x İncele
132Red Hat7Client-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.src İncele
133Red Hat7Client-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.x86_64 İncele
134Red Hat7Client-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.i686 İncele
135Red Hat7Client-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.ppc İncele
136Red Hat7Client-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.ppc64 İncele
137Red Hat7Client-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.s390 İncele
138Red Hat7Client-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.s390x İncele
139Red Hat7Client-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.x86_64 İncele
140Red Hat7Server-7.1.Z:firefox-0:38.1.1-1.el7_1.i686 İncele
141Red Hat7Server-7.1.Z:firefox-0:38.1.1-1.el7_1.ppc İncele
142Red Hat7Server-7.1.Z:firefox-0:38.1.1-1.el7_1.ppc64 İncele
143Red Hat7Server-7.1.Z:firefox-0:38.1.1-1.el7_1.s390 İncele
144Red Hat7Server-7.1.Z:firefox-0:38.1.1-1.el7_1.s390x İncele
145Red Hat7Server-7.1.Z:firefox-0:38.1.1-1.el7_1.src İncele
146Red Hat7Server-7.1.Z:firefox-0:38.1.1-1.el7_1.x86_64 İncele
147Red Hat7Server-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.i686 İncele
148Red Hat7Server-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.ppc İncele
149Red Hat7Server-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.ppc64 İncele
150Red Hat7Server-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.s390 İncele
151Red Hat7Server-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.s390x İncele
152Red Hat7Server-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.x86_64 İncele
153Red Hat7Server-LE-7.1.Z:firefox-0:38.1.1-1.ael7b_1.ppc64le İncele
154Red Hat7Server-LE-7.1.Z:firefox-0:38.1.1-1.ael7b_1.src İncele
155Red Hat7Server-LE-7.1.Z:firefox-debuginfo-0:38.1.1-1.ael7b_1.ppc64le İncele
156Red Hat7Server-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.i686 İncele
157Red Hat7Server-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.ppc İncele
158Red Hat7Server-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.ppc64 İncele
159Red Hat7Server-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.s390 İncele
160Red Hat7Server-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.s390x İncele
161Red Hat7Server-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.src İncele
162Red Hat7Server-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.x86_64 İncele
163Red Hat7Server-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.i686 İncele
164Red Hat7Server-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.ppc İncele
165Red Hat7Server-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.ppc64 İncele
166Red Hat7Server-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.s390 İncele
167Red Hat7Server-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.s390x İncele
168Red Hat7Server-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.x86_64 İncele
169Red Hat7Workstation-7.1.Z:firefox-0:38.1.1-1.el7_1.i686 İncele
170Red Hat7Workstation-7.1.Z:firefox-0:38.1.1-1.el7_1.ppc İncele
171Red Hat7Workstation-7.1.Z:firefox-0:38.1.1-1.el7_1.ppc64 İncele
172Red Hat7Workstation-7.1.Z:firefox-0:38.1.1-1.el7_1.s390 İncele
173Red Hat7Workstation-7.1.Z:firefox-0:38.1.1-1.el7_1.s390x İncele
174Red Hat7Workstation-7.1.Z:firefox-0:38.1.1-1.el7_1.src İncele
175Red Hat7Workstation-7.1.Z:firefox-0:38.1.1-1.el7_1.x86_64 İncele
176Red Hat7Workstation-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.i686 İncele
177Red Hat7Workstation-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.ppc İncele
178Red Hat7Workstation-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.ppc64 İncele
179Red Hat7Workstation-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.s390 İncele
180Red Hat7Workstation-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.s390x İncele
181Red Hat7Workstation-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.x86_64 İncele
182Red Hat7Workstation-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.i686 İncele
183Red Hat7Workstation-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.ppc İncele
184Red Hat7Workstation-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.ppc64 İncele
185Red Hat7Workstation-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.s390 İncele
186Red Hat7Workstation-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.s390x İncele
187Red Hat7Workstation-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.src İncele
188Red Hat7Workstation-optional-7.1.Z:firefox-0:38.1.1-1.el7_1.x86_64 İncele
189Red Hat7Workstation-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.i686 İncele
190Red Hat7Workstation-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.ppc İncele
191Red Hat7Workstation-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.ppc64 İncele
192Red Hat7Workstation-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.s390 İncele
193Red Hat7Workstation-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.s390x İncele
194Red Hat7Workstation-optional-7.1.Z:firefox-debuginfo-0:38.1.1-1.el7_1.x86_64 İncele
195mozillafirefox İncele
Total Affected Vendor: 2|Products: 195

RED HAT CSAF/VEX — Ürün Etki Kontrolü

Bu CVE benim Red Hat ürünümü etkiliyor mu?

Sonuçlar doğrudan Red Hat CSAF VEX ürün durumundan gelir; tahmin değildir.

Düzeltme yayımlandı

Bu ürün dalı için Red Hat düzeltmesi yayımlanmış.

Red Hat düzeltmeleri

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

SCORING — CVSS Çoklu Kaynak Skoru

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
4.3cvss_v2—AV:N/AC:M/Au:N/C:P/I:N/A:NRed Hat

Yama ve İyileştirme Rehberi (Solution)

Solution & Remediation Advisory

Yama doğrulandı

2 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

redhat

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
reference

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
canonical

Apply updates per vendor instructions.

Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.
İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.
Kanıtta belirtilen resmî güncellemeyi yalnızca eşleşen ürün ve sürüme uygulayın.
Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.

Public exploit ve aktif sömürü durumu

Doğrulanmış exploit istihbaratı

Bu CVE CISA KEV kataloğunda aktif sömürülen olarak işaretli; ancak henüz doğrulanmış, indirilebilir bir public PoC veya Metasploit modülü bulunamadı. Aktif sömürü kanıtı public exploit kodu bulunduğu anlamına gelmez.

Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2015-4495 is associated with the following CWEs:

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-20: Improper Input Validation

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2015-4495 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Saldırı Vektörü ve Erişilebilirlik Karakteristiği

ErişimAğ üzerinden
Yetki—
Kullanıcı—

Resmi Kaynaklar ve Danışma Bültenleri

Canonical URLvendor-advisoryRHBZ#1251318vendor-advisoryhttps://www.cve.org/CVERecord?id=CVE-2015-4495vendor-advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2015-4495vendor-advisoryhttps://access.redhat.com/articles/1563163vendor-advisoryhttps://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-wild/vendor-advisoryhttps://www.mozilla.org/security/announce/2015/mfsa2015-78.htmlvendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogvendor-advisoryBefore applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258patch

CVSS Vektör Radar Grafiği

4.3 / 10
Attack VectorNetworkComplexityHighPrivilegesHighUser Interact.RequiredConfidentialityNoneIntegrityNoneAvailabilityNone

Vulnerability Scoring Details

AV:N/AC:M/Au:N/C:P/I:N/A:N
Attack VectorNetwork (Ağ)
Attack Complexity—
Privileges Required—
User Interaction—
Confidentiality (Gizlilik)P
Integrity (Bütünlük)None (Yok)
Availability (Erişilebilirlik)None (Yok)

Yama doğrulandı

2 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Üreticiyi takip et

RH
Red Hat logo
Red Hat
M
mozilla logo
mozilla

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2015-4495"