CVE-2015-2918

NONE EPSS 50.7%
Published Dec 31, 201510y ago · Modified Jun 17, 20262w ago
Find Similar
Published Dec 31, 2015 10y ago
Last Modified Jun 17, 2026 2w ago

Description

The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

Threat Intelligence

EPSS Exploit Probability
50.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-20 Improper Input Validation Validation

Affected Products 2

VendorProductVersionRange
orientdborientdb2.0.14any
orientdborientdb2.1.0any

References 1

  • kb.cert.org https://www.kb.cert.org/vuls/id/845332
    Third Party AdvisoryUS Government Resource

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.