Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact
2.6
CVSSv2

CVE-2015-7094

Published: 11/12/2015 Updated: 13/09/2017
CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9
VMScore: 231
Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N

Vulnerability Summary

CFNetwork HTTPProtocol in Apple iOS prior to 9.2 and OS X prior to 10.11.2 allows man-in-the-middle malicious users to bypass the HSTS protection mechanism via a crafted URL.

Vulnerable Product Search on Vulmon Subscribe to Product

apple iphone os

apple mac os x

References

CWE-20http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.htmlhttps://support.apple.com/HT205637http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.htmlhttps://support.apple.com/HT205635http://www.securitytracker.com/id/1034344https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-33545CVE-2024-35725CVE-2024-32704overflowfile uploadCVE-2024-0230CVE-2024-32705CVE-2024-23692
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook