CVE-2015-1835

🗓️ 27 Oct 2017 19:00:00Reported by redhatType

Apache Cordova Android allows remote attackers to modify configuration variable

Reporter	Title	Published	Views	Family All 12
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Cordova affects IBM Worklight and IBM MobileFirst Platform Foundation (CVE-2015-1835)	17 Jun 201822:31	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability, exists in the Android platform used by the Cordova tools in Rational Software Architect for WebSphere Software (CVE-2015-1835)	10 Sep 202017:03	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability, exists in the Android platform used by the Cordova tools in Rational Application Developer for WebSphere Software (CVE-2015-1835)	5 Feb 202000:09	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability, exists in the Android platform used by the Cordova tools packaged with Rational Application Developer affecting Rational Developer for i and Rational Developer for AIX and Linux (CVE-2015-1835)	3 Aug 201804:23	–	ibm
CNVD	Apache Cordova For Android Security Bypass Vulnerability	1 Jun 201500:00	–	cnvd
Cvelist	CVE-2015-1835	27 Oct 201719:00	–	cvelist
EUVD	EUVD-2015-1950	7 Oct 202500:30	–	euvd
NVD	CVE-2015-1835	27 Oct 201719:29	–	nvd
Prion	Code injection	27 Oct 201719:29	–	prion
securityvulns	CVE-2015-1835: ...	1 Jun 201500:00	–	securityvulns

NVD

Node

apache cordovaRange≤3.7.1android

apache cordovaMatch4.0.0android

apache cordovaMatch4.0.1android

Source	Link
blog	www.blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-apache-vulnerability-that-allows-one-click-modification-of-android-apps/
securityfocus	www.securityfocus.com/bid/74866
cordova	www.cordova.apache.org/announcements/2015/05/26/android-402.html

13 May 2026 00:24Current

4.9Medium risk

Vulners AI Score4.9

CVSS 22.6

CVSS 35.3

EPSS0.00625