Lucene search

K
cve[email protected]CVE-2015-6770
HistoryDec 06, 2015 - 1:59 a.m.

CVE-2015-6770

2015-12-0601:59:07
CWE-264
web.nvd.nist.gov
55
2
cve-2015-6770
google chrome
dom
same origin policy
vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.7%

The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6768.

Affected configurations

NVD
Node
googlechromeRange46.0.2490.86

Social References

More

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.7%