Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIbmCVE-2015-1932
HistoryAug 22, 2015 - 11:59 p.m.

CVE-2015-1932

2015-08-2223:59:01
CWE-200
ibm
web.nvd.nist.gov
46
ibm
websphere
application server
info disclosure
http via
cve-2015-1932
security vulnerability

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

High

EPSS

0.003

Percentile

70.2%

JSON

IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensitive information about the proxy-server software by reading the HTTP Via header.

Affected configurations

Nvd
Node
ibmwebsphere_virtual_enterpriseRange≤7.0.0.6
Node
ibmwebsphere_application_serverMatch7.0.0.1
OR
ibmwebsphere_application_serverMatch7.0.0.2
OR
ibmwebsphere_application_serverMatch7.0.0.3
OR
ibmwebsphere_application_serverMatch7.0.0.4
OR
ibmwebsphere_application_serverMatch7.0.0.5
OR
ibmwebsphere_application_serverMatch7.0.0.6
OR
ibmwebsphere_application_serverMatch7.0.0.7
OR
ibmwebsphere_application_serverMatch7.0.0.8
OR
ibmwebsphere_application_serverMatch7.0.0.9
OR
ibmwebsphere_application_serverMatch7.0.0.10
OR
ibmwebsphere_application_serverMatch7.0.0.11
OR
ibmwebsphere_application_serverMatch7.0.0.12
OR
ibmwebsphere_application_serverMatch7.0.0.13
OR
ibmwebsphere_application_serverMatch7.0.0.14
OR
ibmwebsphere_application_serverMatch7.0.0.15
OR
ibmwebsphere_application_serverMatch7.0.0.16
OR
ibmwebsphere_application_serverMatch7.0.0.17
OR
ibmwebsphere_application_serverMatch7.0.0.18
OR
ibmwebsphere_application_serverMatch7.0.0.19
OR
ibmwebsphere_application_serverMatch7.0.0.21
OR
ibmwebsphere_application_serverMatch7.0.0.22
OR
ibmwebsphere_application_serverMatch7.0.0.23
OR
ibmwebsphere_application_serverMatch7.0.0.24
OR
ibmwebsphere_application_serverMatch7.0.0.25
OR
ibmwebsphere_application_serverMatch7.0.0.27
OR
ibmwebsphere_application_serverMatch7.0.0.29
OR
ibmwebsphere_application_serverMatch7.0.0.31
OR
ibmwebsphere_application_serverMatch7.0.0.32
OR
ibmwebsphere_application_serverMatch7.0.0.33
OR
ibmwebsphere_application_serverMatch7.0.0.34
OR
ibmwebsphere_application_serverMatch7.0.0.36
OR
ibmwebsphere_application_serverMatch7.0.0.37
OR
ibmwebsphere_application_serverMatch7.0.0.38
OR
ibmwebsphere_application_serverMatch8.0.0.0
OR
ibmwebsphere_application_serverMatch8.0.0.1
OR
ibmwebsphere_application_serverMatch8.0.0.2
OR
ibmwebsphere_application_serverMatch8.0.0.3
OR
ibmwebsphere_application_serverMatch8.0.0.4
OR
ibmwebsphere_application_serverMatch8.0.0.5
OR
ibmwebsphere_application_serverMatch8.0.0.6
OR
ibmwebsphere_application_serverMatch8.0.0.7
OR
ibmwebsphere_application_serverMatch8.0.0.8
OR
ibmwebsphere_application_serverMatch8.0.0.9
OR
ibmwebsphere_application_serverMatch8.0.0.10
OR
ibmwebsphere_application_serverMatch8.5.0.0
OR
ibmwebsphere_application_serverMatch8.5.0.1
OR
ibmwebsphere_application_serverMatch8.5.0.2
OR
ibmwebsphere_application_serverMatch8.5.5.0
OR
ibmwebsphere_application_serverMatch8.5.5.1
OR
ibmwebsphere_application_serverMatch8.5.5.2
OR
ibmwebsphere_application_serverMatch8.5.5.3
OR
ibmwebsphere_application_serverMatch8.5.5.4
OR
ibmwebsphere_application_serverMatch8.5.5.5
OR
ibmwebsphere_application_serverMatch8.5.5.6
VendorProductVersionCPE
ibmwebsphere_virtual_enterprise*cpe:2.3:a:ibm:websphere_virtual_enterprise:*:*:*:*:*:*:*:*
ibmwebsphere_application_server7.0.0.1cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*
ibmwebsphere_application_server7.0.0.2cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*
ibmwebsphere_application_server7.0.0.3cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*
ibmwebsphere_application_server7.0.0.4cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*
ibmwebsphere_application_server7.0.0.5cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*
ibmwebsphere_application_server7.0.0.6cpe:2.3:a:ibm:websphere_application_server:7.0.0.6:*:*:*:*:*:*:*
ibmwebsphere_application_server7.0.0.7cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*
ibmwebsphere_application_server7.0.0.8cpe:2.3:a:ibm:websphere_application_server:7.0.0.8:*:*:*:*:*:*:*
ibmwebsphere_application_server7.0.0.9cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*
Rows per page:
1-10 of 551

Related

cvelist 1
ibm 12
prion 1
nvd 1
openvas 1
nessus 6
cvelist
cvelist
CVE-2015-1932
2015-08-22 23:00:00
ibm
ibm
Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with Tivoli Usage and Accounting Manager/SmartCloud Cost Management. (CVE-2015-1932)
2018-06-17 22:29:58
Security Bulletin: Multiple Security Vulnerabilities fixed in IBM WebSphere Application Server 8.5.5.7
2022-09-08 00:26:26
Security Bulletin: A security vulnerability has been identified in IBM Business Process Manager and IBM HTTP Server shipped with IBM Cloud Orchestrator (CVE-2015-1932, CVE-2015-4938)
2018-06-17 22:32:53
prion
prion
Design/Logic Flaw
2015-08-22 23:59:00
nvd
nvd
CVE-2015-1932
2015-08-22 23:59:01
openvas
openvas
IBM Websphere Application Server Multiple Vulnerabilities-01 (Feb 2016)
2016-02-16 00:00:00
nessus
nessus
IBM WebSphere Application Server 8.5 < 8.5.5.7 Multiple Vulnerabilities
2016-10-26 00:00:00
IBM HTTP Server 6.1 <= 6.1.0.47 (FP47) / 7.0 < 7.0.0.39 (FP39) / 8.0 < 8.0.0.12 (FP12) / 8.5 < 8.5.5.7 (FP7) Multiple Vulnerabilities
2015-09-18 00:00:00
IBM WebSphere Application Server 7.0 < 7.0.0.39 (FP39) / 8.0 < 8.0.0.11 (FP11) / 8.5 < 8.5.5.6 (FP6) Multiple Vulnerabilities (Bar Mitzvah) (FREAK)
2015-07-09 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

High

EPSS

0.003

Percentile

70.2%

JSON
Related for CVE-2015-1932
cvelist1ibm12prion1nvd1openvas1nessus6