CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-1464

RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 56.4%

CVSS Severity

CVSS v2 Score 6.4

References

Products affected by CVE-2015-1464

Bestpractical » Request Tracker » Version: 3.6.10

cpe:2.3:a:bestpractical:request_tracker:3.6.10
Bestpractical » Request Tracker » Version: 3.6.11

cpe:2.3:a:bestpractical:request_tracker:3.6.11
Bestpractical » Request Tracker » Version: 3.6.8

cpe:2.3:a:bestpractical:request_tracker:3.6.8
Bestpractical » Request Tracker » Version: 3.8.10

cpe:2.3:a:bestpractical:request_tracker:3.8.10
Bestpractical » Request Tracker » Version: 3.8.11

cpe:2.3:a:bestpractical:request_tracker:3.8.11
Bestpractical » Request Tracker » Version: 3.8.12

cpe:2.3:a:bestpractical:request_tracker:3.8.12
Bestpractical » Request Tracker » Version: 3.8.13

cpe:2.3:a:bestpractical:request_tracker:3.8.13
Bestpractical » Request Tracker » Version: 3.8.14

cpe:2.3:a:bestpractical:request_tracker:3.8.14
Bestpractical » Request Tracker » Version: 3.8.15

cpe:2.3:a:bestpractical:request_tracker:3.8.15
Bestpractical » Request Tracker » Version: 3.8.16

cpe:2.3:a:bestpractical:request_tracker:3.8.16
Bestpractical » Request Tracker » Version: 3.8.17

cpe:2.3:a:bestpractical:request_tracker:3.8.17
Bestpractical » Request Tracker » Version: 3.8.3

cpe:2.3:a:bestpractical:request_tracker:3.8.3
Bestpractical » Request Tracker » Version: 3.8.4

cpe:2.3:a:bestpractical:request_tracker:3.8.4
Bestpractical » Request Tracker » Version: 3.8.7

cpe:2.3:a:bestpractical:request_tracker:3.8.7
Bestpractical » Request Tracker » Version: 3.8.8

cpe:2.3:a:bestpractical:request_tracker:3.8.8
Bestpractical » Request Tracker » Version: 3.8.9

cpe:2.3:a:bestpractical:request_tracker:3.8.9
Bestpractical » Request Tracker » Version: 4.0.0

cpe:2.3:a:bestpractical:request_tracker:4.0.0
Bestpractical » Request Tracker » Version: 4.0.1

cpe:2.3:a:bestpractical:request_tracker:4.0.1
Bestpractical » Request Tracker » Version: 4.0.10

cpe:2.3:a:bestpractical:request_tracker:4.0.10
Bestpractical » Request Tracker » Version: 4.0.11

cpe:2.3:a:bestpractical:request_tracker:4.0.11
Bestpractical » Request Tracker » Version: 4.0.12

cpe:2.3:a:bestpractical:request_tracker:4.0.12
Bestpractical » Request Tracker » Version: 4.0.13

cpe:2.3:a:bestpractical:request_tracker:4.0.13
Bestpractical » Request Tracker » Version: 4.0.14

cpe:2.3:a:bestpractical:request_tracker:4.0.14
Bestpractical » Request Tracker » Version: 4.0.15

cpe:2.3:a:bestpractical:request_tracker:4.0.15
Bestpractical » Request Tracker » Version: 4.0.16

cpe:2.3:a:bestpractical:request_tracker:4.0.16
Bestpractical » Request Tracker » Version: 4.0.17

cpe:2.3:a:bestpractical:request_tracker:4.0.17
Bestpractical » Request Tracker » Version: 4.0.18

cpe:2.3:a:bestpractical:request_tracker:4.0.18
Bestpractical » Request Tracker » Version: 4.0.19

cpe:2.3:a:bestpractical:request_tracker:4.0.19
Bestpractical » Request Tracker » Version: 4.0.2

cpe:2.3:a:bestpractical:request_tracker:4.0.2
Bestpractical » Request Tracker » Version: 4.0.20

cpe:2.3:a:bestpractical:request_tracker:4.0.20
Bestpractical » Request Tracker » Version: 4.0.21

cpe:2.3:a:bestpractical:request_tracker:4.0.21
Bestpractical » Request Tracker » Version: 4.0.22

cpe:2.3:a:bestpractical:request_tracker:4.0.22
Bestpractical » Request Tracker » Version: 4.0.3

cpe:2.3:a:bestpractical:request_tracker:4.0.3
Bestpractical » Request Tracker » Version: 4.0.4

cpe:2.3:a:bestpractical:request_tracker:4.0.4
Bestpractical » Request Tracker » Version: 4.0.5

cpe:2.3:a:bestpractical:request_tracker:4.0.5
Bestpractical » Request Tracker » Version: 4.0.6

cpe:2.3:a:bestpractical:request_tracker:4.0.6
Bestpractical » Request Tracker » Version: 4.0.7

cpe:2.3:a:bestpractical:request_tracker:4.0.7
Bestpractical » Request Tracker » Version: 4.0.8

cpe:2.3:a:bestpractical:request_tracker:4.0.8
Bestpractical » Request Tracker » Version: 4.0.9

cpe:2.3:a:bestpractical:request_tracker:4.0.9
Bestpractical » Request Tracker » Version: 4.2.0

cpe:2.3:a:bestpractical:request_tracker:4.2.0
Bestpractical » Request Tracker » Version: 4.2.1

cpe:2.3:a:bestpractical:request_tracker:4.2.1
Bestpractical » Request Tracker » Version: 4.2.2

cpe:2.3:a:bestpractical:request_tracker:4.2.2
Bestpractical » Request Tracker » Version: 4.2.3

cpe:2.3:a:bestpractical:request_tracker:4.2.3
Bestpractical » Request Tracker » Version: 4.2.4

cpe:2.3:a:bestpractical:request_tracker:4.2.4
Bestpractical » Request Tracker » Version: 4.2.5

cpe:2.3:a:bestpractical:request_tracker:4.2.5
Bestpractical » Request Tracker » Version: 4.2.6

cpe:2.3:a:bestpractical:request_tracker:4.2.6
Bestpractical » Request Tracker » Version: 4.2.7

cpe:2.3:a:bestpractical:request_tracker:4.2.7
Bestpractical » Request Tracker » Version: 4.2.8

cpe:2.3:a:bestpractical:request_tracker:4.2.8
Bestpractical » Request Tracker » Version: 4.2.9

cpe:2.3:a:bestpractical:request_tracker:4.2.9
Fedoraproject » Fedora » Version: 21

cpe:2.3:o:fedoraproject:fedora:21
Fedoraproject » Fedora » Version: 22

cpe:2.3:o:fedoraproject:fedora:22

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-1464

Products

Pricing

Contact Us