EUVD-2020-0524

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Netty and Play Framework vulnerabilities allow bypassing httpOnly flag and revealing sensitive data

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Netty affect watsonx.data	3 Sep 202420:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product	20 May 202014:01	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Netty, IBM Operations Analytics - Log Analysis is affected by denial of service, information disclosure, and HTTP request smuggling	6 Apr 202617:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®	19 Apr 202116:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java and IBM WebSphere Application Server Liberty	18 Dec 202409:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerable netty classes from couchdb affecting IBM Knowledge Catalog for IBM Cloud Pak for Data	10 Jun 202421:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM StreamSets Data Collector	22 Dec 202520:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	2 Dec 202121:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	10 Mar 202121:20	–	ibm
Chainguard	CVE-2015-2156 vulnerabilities	10 Apr 202602:13	–	cgr

[
  {
    "enisaIdVendor": [
      {
        "id": "4ec5a3a3-3608-33a9-a4b3-6c9c0ccb864a",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0075f6f2-cfad-3727-a1e6-0e56bc44e9a7",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-2156
github	www.github.com/netty/netty/pull/3748/commits/4ac519f534493bb0ca7a77e1c779138a54faa7b9
github	www.github.com/netty/netty/pull/3754
github	www.github.com/netty/netty/commit/2caa38a2795fe1f1ae6ceda4d69e826ed7c55e55
github	www.github.com/netty/netty/commit/31815598a2af37f0b71ea94eada70d6659c23752
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/netty/netty
lists	www.lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe@%3Ccommits.druid.apache.org%3E
lists	www.lists.apache.org/thread.html/a19bb1003b0d6cd22475ba83c019b4fc7facfef2a9e13f71132529d3@%3Ccommits.cassandra.apache.org%3E
lists	www.lists.apache.org/thread.html/dc1275aef115bda172851a231c76c0932d973f9ffd8bc375c4aba769@%3Ccommits.cassandra.apache.org%3E

07 Oct 2025 00:30Current

7.6High risk

Vulners AI Score7.6

CVSS 37.5

CVSS 24.3

EPSS0.03271