Lucene search
HistoryOct 23, 2015 - 9:59 p.m.
CVE-2015-7007
cve-2015-7007
script editor
apple os x
remote attack
bypass
user-confirmation
applescript
security vulnerability
nvd
6.2 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.973 High
EPSS
Percentile
99.9%
Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:mac_os_x | apple mac os x | le | 10.11.0 |
References
Related
saint
saint
Safari Script Editor AppleScript execution
2015-11-02 00:00:00
Safari Script Editor AppleScript execution
2015-11-02 00:00:00
Safari Script Editor AppleScript execution
2015-11-02 00:00:00
zdt
zdt
Safari User-Assisted Applescript Exec Attack Exploit
2015-10-26 00:00:00
packetstorm
packetstorm
Safari User-Assisted Applescript Exec Attack
2015-10-23 00:00:00
prion
prion
Design/Logic Flaw
2015-10-23 21:59:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities-01 (Oct 2015)
2015-10-29 00:00:00
securityvulns
securityvulns
APPLE-SA-2015-10-21-4 OS X El Capitan 10.11.1 and Security Update 2015-007
2015-10-25 00:00:00
Apple Mac OS X / Mac EFI / OS X Server multiple security vulnerabilities
2015-10-25 00:00:00
nessus
nessus
Mac OS X < 10.11.1 Multiple Vulnerabilities
2015-10-29 00:00:00
Mac OS X 10.9.5 or later < 10.11.1 Multiple Vulnerabilities
2016-05-27 00:00:00
6.2 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.973 High
EPSS
Percentile
99.9%
Related for CVE-2015-7007