By publication date

Exploited and new serious CVEs: July 2015

78 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
27Monitor	CVE-2015-5354Proof of concept	Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites and conduct phishingnovius-os · novius os · CWE-601 Pre-auth Open redirect	Medium5.8	—	12.4%	Jul 1, 2015
40Plan	CVE-2015-3673Weaponized	Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtapple · mac os x · CWE-264 Local privilege escalation	High7.2	—	5.8%	Jul 2, 2015
68This week	CVE-2015-5371Weaponized	The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecifiedsolarwinds · storage manager pre-auth RCE	Critical10.0	—	93.0%	Jul 6, 2015
42Plan	CVE-2015-4620No exploit	name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNisc · bind · CWE-17 Pre-auth Denial of service	High7.8	—	37.6%	Jul 8, 2015
99Now	CVE-2015-5119Weaponized	Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296adobe · flash player · CWE-416 pre-auth RCE Memory safety	Critical9.8	KEV	98.6%	Jul 8, 2015
44Plan	CVE-2015-5453Weaponized	Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in twatchguard · xcs · CWE-77 RCE Command injection	Medium6.5	—	58.4%	Jul 8, 2015
23Monitor	CVE-2015-4616Proof of concept	Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allows remote attackers easy2map project · easy2map · CWE-22 Pre-auth Path traversal	Medium5.0	—	10.4%	Jul 8, 2015
52Plan	CVE-2015-3118Proof of concept	Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before adobe · flash player pre-auth RCE	Critical10.0	—	40.4%	Jul 9, 2015
50Plan	CVE-2015-3124Proof of concept	Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before adobe · flash player pre-auth RCE	Critical10.0	—	33.4%	Jul 9, 2015
52Plan	CVE-2015-3128Proof of concept	Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before adobe · air pre-auth RCE	Critical10.0	—	39.2%	Jul 9, 2015
48Plan	CVE-2015-3134Proof of concept	Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIRadobe · flash player · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	26.4%	Jul 9, 2015
50Plan	CVE-2015-3137Proof of concept	Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before adobe · flash player pre-auth RCE	Critical10.0	—	32.7%	Jul 9, 2015
50Plan	CVE-2015-4430Proof of concept	Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before adobe · air pre-auth RCE	Critical10.0	—	32.7%	Jul 9, 2015
50Plan	CVE-2015-4432Proof of concept	Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11adobe · air · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	34.1%	Jul 9, 2015
27Monitor	CVE-2015-5116Proof of concept	Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIRadobe · flash player · CWE-284 Pre-auth Broken access control (IDOR)	Medium5.0	—	22.4%	Jul 9, 2015
48Plan	CVE-2015-5118Proof of concept	Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11adobe · flash player · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	27.7%	Jul 9, 2015
60This week	CVE-2015-1793Weaponized	The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic openssl · openssl · CWE-254 Pre-auth	Medium6.5	—	58.2%	Jul 9, 2015
97Now	CVE-2015-5122Weaponized	Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0adobe · flash player · CWE-416 pre-auth RCE Memory safety	Critical9.8	KEV	93.8%	Jul 14, 2015
75This week	CVE-2015-5123Weaponized	Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.30adobe · flash player · CWE-416 pre-auth RCE Memory safety	Critical9.8	KEV	18.8%	Jul 14, 2015
21Monitor	CVE-2015-1729No exploit	Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web smicrosoft · internet explorer · CWE-200 Pre-auth Info leak	Medium4.3	—	14.9%	Jul 14, 2015
41Plan	CVE-2015-1733No exploit	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
41Plan	CVE-2015-1738No exploit	Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via amicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
43Plan	CVE-2015-1767No exploit	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	18.4%	Jul 14, 2015
30Monitor	CVE-2015-2369No exploit	Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server microsoft · windows 2003 server RCE Local privilege escalation	Medium6.9	—	10.0%	Jul 14, 2015
43Plan	CVE-2015-2372No exploit	vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers microsoft · vbscript · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.2%	Jul 14, 2015
51Plan	CVE-2015-2373No exploit	The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to emicrosoft · windows 7 · CWE-19 pre-auth RCE	Critical10.0	—	38.1%	Jul 14, 2015
21Monitor	CVE-2015-2375No exploit	Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel microsoft · excel · CWE-200 Pre-auth Info leak	Medium4.3	—	13.8%	Jul 14, 2015
42Plan	CVE-2015-2376No exploit	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibilitmicrosoft · excel · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	15.7%	Jul 14, 2015
41Plan	CVE-2015-2377No exploit	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to exemicrosoft · excel · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.6%	Jul 14, 2015
41Plan	CVE-2015-2379No exploit	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, and Word Viewer allow remote microsoft · office · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.7%	Jul 14, 2015
41Plan	CVE-2015-2380No exploit	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, and Word 2013 RT SP1 allow remote attackers to execute arbitrary codmicrosoft · office · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.7%	Jul 14, 2015
41Plan	CVE-2015-2383No exploit	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
41Plan	CVE-2015-2384No exploit	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
41Plan	CVE-2015-2385No exploit	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
41Plan	CVE-2015-2388No exploit	Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via amicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
41Plan	CVE-2015-2389No exploit	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
41Plan	CVE-2015-2390No exploit	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
41Plan	CVE-2015-2391No exploit	Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
41Plan	CVE-2015-2397No exploit	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
21Monitor	CVE-2015-2398No exploit	Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML dmicrosoft · internet explorer · CWE-79 Pre-auth XSS	Medium4.3	—	12.0%	Jul 14, 2015
41Plan	CVE-2015-2401No exploit	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
21Monitor	CVE-2015-2402No exploit	Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevationmicrosoft · internet explorer · CWE-264 Pre-auth	Medium4.3	—	12.4%	Jul 14, 2015
41Plan	CVE-2015-2403No exploit	Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
41Plan	CVE-2015-2404No exploit	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
41Plan	CVE-2015-2406No exploit	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
43Plan	CVE-2015-2408No exploit	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	20.8%	Jul 14, 2015
22Monitor	CVE-2015-2410No exploit	Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted stylesheet, aka "Inmicrosoft · internet explorer · CWE-200 Pre-auth Info leak	Medium4.3	—	15.5%	Jul 14, 2015
41Plan	CVE-2015-2411No exploit	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
22Monitor	CVE-2015-2412No exploit	Microsoft Internet Explorer 10 and 11 allows remote attackers to read arbitrary local files via a crafted pathname, aka "Internet Explorer Imicrosoft · internet explorer · CWE-20 Pre-auth	Medium4.3	—	17.8%	Jul 14, 2015
22Monitor	CVE-2015-2413No exploit	Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted module-resource reqmicrosoft · internet explorer · CWE-200 Pre-auth Info leak	Medium4.3	—	15.5%	Jul 14, 2015
22Monitor	CVE-2015-2414No exploit	Microsoft Internet Explorer 8 through 11 allows remote attackers to obtain sensitive browsing-history information via vectors related to imamicrosoft · internet explorer · CWE-200 Pre-auth Info leak	Medium4.3	—	15.5%	Jul 14, 2015
41Plan	CVE-2015-2415No exploit	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to exemicrosoft · excel · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.6%	Jul 14, 2015
81Now	CVE-2015-2419Weaponized	JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory comicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High8.8	KEV	53.1%	Jul 14, 2015
21Monitor	CVE-2015-2421No exploit	Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internmicrosoft · internet explorer · CWE-200 Pre-auth Info leak	Medium4.3	—	13.3%	Jul 14, 2015
41Plan	CVE-2015-2422No exploit	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	Jul 14, 2015
77This week	CVE-2015-2424Weaponized	Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RTmicrosoft · excel viewer · CWE-787 pre-auth RCE Memory safety	High8.8	KEV	40.3%	Jul 14, 2015
78This week	CVE-2015-2425Weaponized	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High8.8	KEV	44.7%	Jul 14, 2015
71This week	CVE-2015-2387Weaponized	ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,microsoft · windows 7 · CWE-787 Local privilege escalation Memory safety	High7.8	KEV	34.8%	Jul 14, 2015
23Monitor	CVE-2015-2416No exploit	OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windmicrosoft · windows 2003 server · CWE-20 Pre-auth	Medium5.0	—	10.1%	Jul 14, 2015
23Monitor	CVE-2015-2417No exploit	OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windmicrosoft · windows 2003 server · CWE-20 Pre-auth	Medium5.0	—	10.1%	Jul 14, 2015
32Monitor	CVE-2015-1761No exploit	Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 uses an incorrect class during casts of unspecified pmicrosoft · sql server · CWE-284 Broken access control (IDOR)	Medium6.5	—	18.5%	Jul 14, 2015
31Monitor	CVE-2015-1762No exploit	Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014, when transactional replication is configured, does nmicrosoft · sql server · CWE-74 RCE	High7.1	—	10.3%	Jul 14, 2015
38Monitor	CVE-2015-1763No exploit	Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 does not prevent use of uninitialized memory in certamicrosoft · sql server · CWE-284 RCE Broken access control (IDOR)	High8.5	—	11.9%	Jul 14, 2015
46Plan	CVE-2015-5097No exploit	Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.adobe · acrobat · CWE-190 pre-auth RCE Memory safety	Critical10.0	—	18.8%	Jul 15, 2015
77This week	CVE-2015-2590Weaponized	Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confioracle · jdk Pre-auth	Critical9.8	KEV	25.4%	Jul 16, 2015
43Plan	CVE-2015-4748No exploit	Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remoteoracle · jrockit Pre-auth	High7.6	—	44.8%	Jul 16, 2015
53Plan	CVE-2015-5374Weaponized	A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Mosiemens · siprotec firmware · CWE-19 Pre-auth Denial of service	High7.8	—	74.4%	Jul 18, 2015
91Now	CVE-2015-2426Weaponized	Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, microsoft · windows 10 · CWE-119 pre-auth RCE Memory safety	High8.8	KEV	86.5%	Jul 20, 2015
24Monitor	CVE-2015-0253No exploit	The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, whicapache · http server Pre-auth Denial of service	Medium5.0	—	12.9%	Jul 20, 2015
20Monitor	CVE-2015-2863Proof of concept	Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and kaseya · virtual system administrator Pre-auth Open redirect	Medium4.3	—	10.3%	Jul 20, 2015
42Plan	CVE-2015-3183No exploit	The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remotapache · http server · CWE-17 Pre-auth	Medium5.0	—	73.3%	Jul 20, 2015
22Monitor	CVE-2015-3185No exploit	The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directapache · http server · CWE-264 Pre-auth	Medium4.3	—	16.3%	Jul 20, 2015
33Monitor	CVE-2015-1283No exploit	Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other prodgoogle · chrome · CWE-190 Pre-auth Memory safety	Medium6.8	—	18.4%	Jul 22, 2015
40Plan	CVE-2015-3224Weaponized	request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headerrubyonrails · web console · CWE-284 Pre-auth Broken access control (IDOR)	Medium4.3	—	44.7%	Jul 26, 2015
90Now	CVE-2015-5477Weaponized	named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion faisc · bind · CWE-19 Pre-auth Denial of service	High7.5	KEV	99.4%	Jul 29, 2015
51Plan	CVE-2015-1486Weaponized	The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authenticatsymantec · endpoint protection manager · CWE-287 Pre-auth Auth bypass	High7.5	—	68.3%	Jul 31, 2015
40Plan	CVE-2015-1487Weaponized	The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write tosymantec · endpoint protection manager · CWE-20	Medium5.5	—	51.9%	Jul 31, 2015
42Plan	CVE-2015-1489Weaponized	The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain prisymantec · endpoint protection manager · CWE-264	High8.5	—	25.3%	Jul 31, 2015

CVE-2015-5354
27Monitor
Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites and conduct phishing
MediumCVSS 5.8Proof of conceptEPSS 12%
- Pre-auth
- Open redirect
novius-os · novius osJul 1, 2015
CVE-2015-3673
40Plan
Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obt
HighCVSS 7.2WeaponizedEPSS 5%
- Local privilege escalation
apple · mac os xJul 2, 2015
CVE-2015-5371
68This week
The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified
CriticalCVSS 10.0WeaponizedEPSS 93%
- pre-auth RCE
solarwinds · storage managerJul 6, 2015
CVE-2015-4620
42Plan
name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DN
HighCVSS 7.8No exploitEPSS 37%
- Pre-auth
- Denial of service
isc · bindJul 8, 2015
CVE-2015-5119
99Now
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296
CriticalCVSS 9.8KEVWeaponizedEPSS 98%
- pre-auth RCE
- Memory safety
adobe · flash playerJul 8, 2015
CVE-2015-5453
44Plan
Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in t
MediumCVSS 6.5WeaponizedEPSS 58%
- RCE
- Command injection
watchguard · xcsJul 8, 2015
CVE-2015-4616
23Monitor
Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allows remote attackers
MediumCVSS 5.0Proof of conceptEPSS 10%
- Pre-auth
- Path traversal
easy2map project · easy2mapJul 8, 2015
CVE-2015-3118
52Plan
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before
CriticalCVSS 10.0Proof of conceptEPSS 40%
- pre-auth RCE
adobe · flash playerJul 9, 2015
CVE-2015-3124
50Plan
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before
CriticalCVSS 10.0Proof of conceptEPSS 33%
- pre-auth RCE
adobe · flash playerJul 9, 2015
CVE-2015-3128
52Plan
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before
CriticalCVSS 10.0Proof of conceptEPSS 39%
- pre-auth RCE
adobe · airJul 9, 2015
CVE-2015-3134
48Plan
Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR
CriticalCVSS 10.0Proof of conceptEPSS 26%
- pre-auth RCE
- Memory safety
adobe · flash playerJul 9, 2015
CVE-2015-3137
50Plan
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before
CriticalCVSS 10.0Proof of conceptEPSS 32%
- pre-auth RCE
adobe · flash playerJul 9, 2015
CVE-2015-4430
50Plan
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before
CriticalCVSS 10.0Proof of conceptEPSS 32%
- pre-auth RCE
adobe · airJul 9, 2015
CVE-2015-4432
50Plan
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11
CriticalCVSS 10.0Proof of conceptEPSS 34%
- pre-auth RCE
- Memory safety
adobe · airJul 9, 2015
CVE-2015-5116
27Monitor
Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR
MediumCVSS 5.0Proof of conceptEPSS 22%
- Pre-auth
- Broken access control (IDOR)
adobe · flash playerJul 9, 2015
CVE-2015-5118
48Plan
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11
CriticalCVSS 10.0Proof of conceptEPSS 27%
- pre-auth RCE
- Memory safety
adobe · flash playerJul 9, 2015
CVE-2015-1793
60This week
The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic
MediumCVSS 6.5WeaponizedEPSS 58%
- Pre-auth
openssl · opensslJul 9, 2015
CVE-2015-5122
97Now
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0
CriticalCVSS 9.8KEVWeaponizedEPSS 93%
- pre-auth RCE
- Memory safety
adobe · flash playerJul 14, 2015
CVE-2015-5123
75This week
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.30
CriticalCVSS 9.8KEVWeaponizedEPSS 18%
- pre-auth RCE
- Memory safety
adobe · flash playerJul 14, 2015
CVE-2015-1729
21Monitor
Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web s
MediumCVSS 4.3No exploitEPSS 14%
- Pre-auth
- Info leak
microsoft · internet explorerJul 14, 2015
CVE-2015-1733
41Plan
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-1738
41Plan
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-1767
43Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 18%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2369
30Monitor
Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server
MediumCVSS 6.9No exploitEPSS 10%
- RCE
- Local privilege escalation
microsoft · windows 2003 serverJul 14, 2015
CVE-2015-2372
43Plan
vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers
CriticalCVSS 9.3No exploitEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · vbscriptJul 14, 2015
CVE-2015-2373
51Plan
The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to e
CriticalCVSS 10.0No exploitEPSS 38%
- pre-auth RCE
microsoft · windows 7Jul 14, 2015
CVE-2015-2375
21Monitor
Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel
MediumCVSS 4.3No exploitEPSS 13%
- Pre-auth
- Info leak
microsoft · excelJul 14, 2015
CVE-2015-2376
42Plan
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibilit
CriticalCVSS 9.3No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · excelJul 14, 2015
CVE-2015-2377
41Plan
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to exe
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · excelJul 14, 2015
CVE-2015-2379
41Plan
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, and Word Viewer allow remote
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · officeJul 14, 2015
CVE-2015-2380
41Plan
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, and Word 2013 RT SP1 allow remote attackers to execute arbitrary cod
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · officeJul 14, 2015
CVE-2015-2383
41Plan
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2384
41Plan
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2385
41Plan
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2388
41Plan
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2389
41Plan
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2390
41Plan
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2391
41Plan
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2397
41Plan
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2398
21Monitor
Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML d
MediumCVSS 4.3No exploitEPSS 12%
- Pre-auth
- XSS
microsoft · internet explorerJul 14, 2015
CVE-2015-2401
41Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2402
21Monitor
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation
MediumCVSS 4.3No exploitEPSS 12%
- Pre-auth
microsoft · internet explorerJul 14, 2015
CVE-2015-2403
41Plan
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2404
41Plan
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2406
41Plan
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2408
43Plan
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2410
22Monitor
Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted stylesheet, aka "In
MediumCVSS 4.3No exploitEPSS 15%
- Pre-auth
- Info leak
microsoft · internet explorerJul 14, 2015
CVE-2015-2411
41Plan
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2412
22Monitor
Microsoft Internet Explorer 10 and 11 allows remote attackers to read arbitrary local files via a crafted pathname, aka "Internet Explorer I
MediumCVSS 4.3No exploitEPSS 17%
- Pre-auth
microsoft · internet explorerJul 14, 2015
CVE-2015-2413
22Monitor
Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted module-resource req
MediumCVSS 4.3No exploitEPSS 15%
- Pre-auth
- Info leak
microsoft · internet explorerJul 14, 2015
CVE-2015-2414
22Monitor
Microsoft Internet Explorer 8 through 11 allows remote attackers to obtain sensitive browsing-history information via vectors related to ima
MediumCVSS 4.3No exploitEPSS 15%
- Pre-auth
- Info leak
microsoft · internet explorerJul 14, 2015
CVE-2015-2415
41Plan
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to exe
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · excelJul 14, 2015
CVE-2015-2419
81Now
JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co
HighCVSS 8.8KEVWeaponizedEPSS 53%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2421
21Monitor
Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Intern
MediumCVSS 4.3No exploitEPSS 13%
- Pre-auth
- Info leak
microsoft · internet explorerJul 14, 2015
CVE-2015-2422
41Plan
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2424
77This week
Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT
HighCVSS 8.8KEVWeaponizedEPSS 40%
- pre-auth RCE
- Memory safety
microsoft · excel viewerJul 14, 2015
CVE-2015-2425
78This week
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
HighCVSS 8.8KEVWeaponizedEPSS 44%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJul 14, 2015
CVE-2015-2387
71This week
ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,
HighCVSS 7.8KEVWeaponizedEPSS 34%
- Local privilege escalation
- Memory safety
microsoft · windows 7Jul 14, 2015
CVE-2015-2416
23Monitor
OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wind
MediumCVSS 5.0No exploitEPSS 10%
- Pre-auth
microsoft · windows 2003 serverJul 14, 2015
CVE-2015-2417
23Monitor
OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wind
MediumCVSS 5.0No exploitEPSS 10%
- Pre-auth
microsoft · windows 2003 serverJul 14, 2015
CVE-2015-1761
32Monitor
Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 uses an incorrect class during casts of unspecified p
MediumCVSS 6.5No exploitEPSS 18%
- Broken access control (IDOR)
microsoft · sql serverJul 14, 2015
CVE-2015-1762
31Monitor
Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014, when transactional replication is configured, does n
HighCVSS 7.1No exploitEPSS 10%
- RCE
microsoft · sql serverJul 14, 2015
CVE-2015-1763
38Monitor
Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 does not prevent use of uninitialized memory in certa
HighCVSS 8.5No exploitEPSS 11%
- RCE
- Broken access control (IDOR)
microsoft · sql serverJul 14, 2015
CVE-2015-5097
46Plan
Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.
CriticalCVSS 10.0No exploitEPSS 18%
- pre-auth RCE
- Memory safety
adobe · acrobatJul 15, 2015
CVE-2015-2590
77This week
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confi
CriticalCVSS 9.8KEVWeaponizedEPSS 25%
- Pre-auth
oracle · jdkJul 16, 2015
CVE-2015-4748
43Plan
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote
HighCVSS 7.6No exploitEPSS 44%
- Pre-auth
oracle · jrockitJul 16, 2015
CVE-2015-5374
53Plan
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Mo
HighCVSS 7.8WeaponizedEPSS 74%
- Pre-auth
- Denial of service
siemens · siprotec firmwareJul 18, 2015
CVE-2015-2426
91Now
Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,
HighCVSS 8.8KEVWeaponizedEPSS 86%
- pre-auth RCE
- Memory safety
microsoft · windows 10Jul 20, 2015
CVE-2015-0253
24Monitor
The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, whic
MediumCVSS 5.0No exploitEPSS 12%
- Pre-auth
- Denial of service
apache · http serverJul 20, 2015
CVE-2015-2863
20Monitor
Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and
MediumCVSS 4.3Proof of conceptEPSS 10%
- Pre-auth
- Open redirect
kaseya · virtual system administratorJul 20, 2015
CVE-2015-3183
42Plan
The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remot
MediumCVSS 5.0No exploitEPSS 73%
- Pre-auth
apache · http serverJul 20, 2015
CVE-2015-3185
22Monitor
The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require direct
MediumCVSS 4.3No exploitEPSS 16%
- Pre-auth
apache · http serverJul 20, 2015
CVE-2015-1283
33Monitor
Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other prod
MediumCVSS 6.8No exploitEPSS 18%
- Pre-auth
- Memory safety
google · chromeJul 22, 2015
CVE-2015-3224
40Plan
request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For header
MediumCVSS 4.3WeaponizedEPSS 44%
- Pre-auth
- Broken access control (IDOR)
rubyonrails · web consoleJul 26, 2015
CVE-2015-5477
90Now
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion fa
HighCVSS 7.5KEVWeaponizedEPSS 99%
- Pre-auth
- Denial of service
isc · bindJul 29, 2015
CVE-2015-1486
51Plan
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authenticat
HighCVSS 7.5WeaponizedEPSS 68%
- Pre-auth
- Auth bypass
symantec · endpoint protection managerJul 31, 2015
CVE-2015-1487
40Plan
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to
MediumCVSS 5.5WeaponizedEPSS 51%
symantec · endpoint protection managerJul 31, 2015
CVE-2015-1489
42Plan
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain pri
HighCVSS 8.5WeaponizedEPSS 25%
symantec · endpoint protection managerJul 31, 2015