Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2015-2156

🗓️ 18 Oct 2017 15:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 112 Views

CVE-2015-2156 Netty and Play Framework security vulnerabilit

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Netty affect watsonx.data
3 Sep 202420:48
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product
20 May 202014:01
–ibm
IBM Security Bulletins		Security Bulletin: Due to use of Netty, IBM Operations Analytics - Log Analysis is affected by denial of service, information disclosure, and HTTP request smuggling
6 Apr 202617:55
–ibm
IBM Security Bulletins		Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®
19 Apr 202116:53
–ibm
IBM Security Bulletins		Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java and IBM WebSphere Application Server Liberty
18 Dec 202409:57
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerable netty classes from couchdb affecting IBM Knowledge Catalog for IBM Cloud Pak for Data
10 Jun 202421:17
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in IBM StreamSets Data Collector
22 Dec 202520:41
–ibm
IBM Security Bulletins		Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities
2 Dec 202121:41
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.
10 Mar 202121:20
–ibm
Chainguard		CVE-2015-2156 vulnerabilities
10 Apr 202602:13
–cgr
Rows per page
NVD
Node
nettynettyRange≤3.9.7
OR
nettynettyMatch3.10.0
OR
nettynettyMatch3.10.1
OR
nettynettyMatch3.10.2
OR
nettynettyMatch4.0.0
OR
nettynettyMatch4.0.1
OR
nettynettyMatch4.0.2
OR
nettynettyMatch4.0.3
OR
nettynettyMatch4.0.4
OR
nettynettyMatch4.0.5
OR
nettynettyMatch4.0.6
OR
nettynettyMatch4.0.7
OR
nettynettyMatch4.0.8
OR
nettynettyMatch4.0.9
OR
nettynettyMatch4.0.10
OR
nettynettyMatch4.0.11
OR
nettynettyMatch4.0.12
OR
nettynettyMatch4.0.13
OR
nettynettyMatch4.0.14
OR
nettynettyMatch4.0.15
OR
nettynettyMatch4.0.16
OR
nettynettyMatch4.0.17
OR
nettynettyMatch4.0.18
OR
nettynettyMatch4.0.19
OR
nettynettyMatch4.0.20
OR
nettynettyMatch4.0.21
OR
nettynettyMatch4.0.22
OR
nettynettyMatch4.0.23
OR
nettynettyMatch4.0.24
OR
nettynettyMatch4.0.25
OR
nettynettyMatch4.0.26
OR
nettynettyMatch4.0.27
OR
nettynettyMatch4.1.0beta1
OR
nettynettyMatch4.1.0beta2
OR
nettynettyMatch4.1.0beta3
OR
nettynettyMatch4.1.0beta4
Node
lightbendplay_frameworkMatch2.0rc3
OR
lightbendplay_frameworkMatch2.0rc4
OR
lightbendplay_frameworkMatch2.0rc5
OR
lightbendplay_frameworkMatch2.0.2
OR
lightbendplay_frameworkMatch2.0.2rc1
OR
lightbendplay_frameworkMatch2.0.2rc2
OR
lightbendplay_frameworkMatch2.0.3
OR
lightbendplay_frameworkMatch2.0.3rc1
OR
lightbendplay_frameworkMatch2.0.3rc2
OR
lightbendplay_frameworkMatch2.0.4
OR
lightbendplay_frameworkMatch2.0.4rc1
OR
lightbendplay_frameworkMatch2.0.4rc2
OR
lightbendplay_frameworkMatch2.0.5
OR
lightbendplay_frameworkMatch2.0.5rc1
OR
lightbendplay_frameworkMatch2.0.5rc2
OR
lightbendplay_frameworkMatch2.0.6
OR
lightbendplay_frameworkMatch2.0.7
OR
lightbendplay_frameworkMatch2.0.8
OR
lightbendplay_frameworkMatch2.1.0
OR
lightbendplay_frameworkMatch2.1.1
OR
lightbendplay_frameworkMatch2.1.1rc1
OR
lightbendplay_frameworkMatch2.2.0
OR
lightbendplay_frameworkMatch2.2.1
OR
lightbendplay_frameworkMatch2.2.2
OR
lightbendplay_frameworkMatch2.2.6
OR
lightbendplay_frameworkMatch2.3.0
OR
lightbendplay_frameworkMatch2.3.0rc1
OR
lightbendplay_frameworkMatch2.3.0rc2
OR
lightbendplay_frameworkMatch2.3.1
OR
lightbendplay_frameworkMatch2.3.2
OR
lightbendplay_frameworkMatch2.3.2rc1
OR
lightbendplay_frameworkMatch2.3.2rc2
OR
lightbendplay_frameworkMatch2.3.3
OR
lightbendplay_frameworkMatch2.3.4
OR
lightbendplay_frameworkMatch2.3.5
OR
lightbendplay_frameworkMatch2.3.6
OR
lightbendplay_frameworkMatch2.3.7
OR
lightbendplay_frameworkMatch2.3.8
OR
playframeworkplay_frameworkMatch2.0
OR
playframeworkplay_frameworkMatch2.0beta
OR
playframeworkplay_frameworkMatch2.0rc1
OR
playframeworkplay_frameworkMatch2.0rc2
OR
playframeworkplay_frameworkMatch2.0.1
OR
playframeworkplay_frameworkMatch2.1.12.9.x-backport
OR
playframeworkplay_frameworkMatch2.1.1rc1-2.9.x-backport
OR
playframeworkplay_frameworkMatch2.1.1rc2
OR
playframeworkplay_frameworkMatch2.1.2
OR
playframeworkplay_frameworkMatch2.1.2rc1
OR
playframeworkplay_frameworkMatch2.1.2rc2
OR
playframeworkplay_frameworkMatch2.1.3
OR
playframeworkplay_frameworkMatch2.1.3rc1
OR
playframeworkplay_frameworkMatch2.1.3rc2
OR
playframeworkplay_frameworkMatch2.1.4
OR
playframeworkplay_frameworkMatch2.1.4rc1
OR
playframeworkplay_frameworkMatch2.1.4rc2
OR
playframeworkplay_frameworkMatch2.1.5
OR
playframeworkplay_frameworkMatch2.1.6
OR
playframeworkplay_frameworkMatch2.1.6rc1
OR
playframeworkplay_frameworkMatch2.2.0m1
OR
playframeworkplay_frameworkMatch2.2.0m2
OR
playframeworkplay_frameworkMatch2.2.0m3
OR
playframeworkplay_frameworkMatch2.2.0rc1
OR
playframeworkplay_frameworkMatch2.2.0rc2
OR
playframeworkplay_frameworkMatch2.2.1rc1
OR
playframeworkplay_frameworkMatch2.2.2rc1
OR
playframeworkplay_frameworkMatch2.2.2rc2
OR
playframeworkplay_frameworkMatch2.2.2rc3
OR
playframeworkplay_frameworkMatch2.2.2rc4
OR
playframeworkplay_frameworkMatch2.2.3
OR
playframeworkplay_frameworkMatch2.2.3rc1
OR
playframeworkplay_frameworkMatch2.2.3rc2
OR
playframeworkplay_frameworkMatch2.2.4
OR
playframeworkplay_frameworkMatch2.2.5
OR
playframeworkplay_frameworkMatch2.3m1
SourceLink
githubwww.github.com/netty/netty/pull/3754
securityfocuswww.securityfocus.com/bid/74704
listswww.lists.apache.org/thread.html/dc1275aef115bda172851a231c76c0932d973f9ffd8bc375c4aba769%40%3Ccommits.cassandra.apache.org%3E
listswww.lists.fedoraproject.org/pipermail/package-announce/2015-May/159166.html
listswww.lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E
bugzillawww.bugzilla.redhat.com/show_bug.cgi
openwallwww.openwall.com/lists/oss-security/2015/05/17/1
playframeworkwww.playframework.com/security/vulnerability/CVE-2015-2156-HttpOnlyBypass
listswww.lists.fedoraproject.org/pipermail/package-announce/2015-June/159379.html
listswww.lists.apache.org/thread.html/a19bb1003b0d6cd22475ba83c019b4fc7facfef2a9e13f71132529d3%40%3Ccommits.cassandra.apache.org%3E
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
13 May 2026 00:24Current
7.3High risk
Vulners AI Score7.3
CVSS 24.3
CVSS 37.5
EPSS0.03271
CWE-20
cve-2015-2156nettyplay frameworksecurity vulnerabilityremote attackerscookie validationnvd
112