Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-5235
HistoryOct 09, 2015 - 2:59 p.m.

CVE-2015-5235

2015-10-0914:59:05
CWE-20
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.4 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.5%

JSON

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page.

Affected configurations

NVD
Node
fedoraprojectfedoraMatch21
OR
fedoraprojectfedoraMatch22
Node
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_hpc_nodeMatch6
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_workstationMatch6.0
Node
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2
Node
redhaticedteaRange≤1.5.2
OR
redhaticedteaMatch1.6

Related

veracode 1
cvelist 1
debiancve 1
prion 1
cve 1
ubuntucve 1
nessus 10
ubuntu 1
mageia 1
archlinux 1
redhat 1
openvas 4
oraclelinux 1
centos 1
suse 1
veracode
veracode
Authorization Bypass
2019-05-02 05:29:34
cvelist
cvelist
CVE-2015-5235
2015-10-09 14:00:00
debiancve
debiancve
CVE-2015-5235
2015-10-09 14:59:05
prion
prion
Authentication flaw
2015-10-09 14:59:00
cve
cve
CVE-2015-5235
2015-10-09 14:59:05
ubuntucve
ubuntucve
CVE-2015-5235
2015-10-09 00:00:00
nessus
nessus
Fedora 21 : icedtea-web-1.6.1-1.fc21 (2015-15677)
2015-09-22 00:00:00
Fedora 22 : icedtea-web-1.6.1-1.fc22 (2015-15676)
2015-09-22 00:00:00
Ubuntu 14.04 LTS : IcedTea Web vulnerabilities (USN-2817-1)
2015-11-25 00:00:00
ubuntu
ubuntu
IcedTea Web vulnerabilities
2015-11-24 00:00:00
mageia
mageia
Updated icedtea-web packages fix security vulnerabilities
2015-09-17 21:02:40
archlinux
archlinux
icedtea-web: multiple issues
2015-09-14 00:00:00
redhat
redhat
(RHSA-2016:0778) Moderate: icedtea-web security, bug fix, and enhancement update
2016-05-10 06:42:20
openvas
openvas
Ubuntu: Security Advisory (USN-2817-1)
2015-11-25 00:00:00
RedHat Update for icedtea-web RHSA-2016:0778-01
2016-05-11 00:00:00
Mageia: Security Advisory (MGASA-2015-0376)
2015-10-15 00:00:00
oraclelinux
oraclelinux
icedtea-web security, bug fix, and enhancement update
2016-05-12 00:00:00
centos
centos
icedtea security update
2016-05-16 10:15:12
suse
suse
Security update for icedtea-web (important)
2015-09-22 11:10:12

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.4 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.5%

JSON
Related for NVD:CVE-2015-5235
veracode1cvelist1debiancve1prion1cve1ubuntucve1nessus10ubuntu1mageia1archlinux1redhat1openvas4oraclelinux1centos1suse1