CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-2156

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.022

EPSS Ranking 83.8%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 4.3

References

Products affected by CVE-2015-2156

Lightbend » Play Framework » Version: 2.0

cpe:2.3:a:lightbend:play_framework:2.0
Lightbend » Play Framework » Version: 2.0.2

cpe:2.3:a:lightbend:play_framework:2.0.2
Lightbend » Play Framework » Version: 2.0.3

cpe:2.3:a:lightbend:play_framework:2.0.3
Lightbend » Play Framework » Version: 2.0.4

cpe:2.3:a:lightbend:play_framework:2.0.4
Lightbend » Play Framework » Version: 2.0.5

cpe:2.3:a:lightbend:play_framework:2.0.5
Lightbend » Play Framework » Version: 2.0.6

cpe:2.3:a:lightbend:play_framework:2.0.6
Lightbend » Play Framework » Version: 2.0.7

cpe:2.3:a:lightbend:play_framework:2.0.7
Lightbend » Play Framework » Version: 2.0.8

cpe:2.3:a:lightbend:play_framework:2.0.8
Lightbend » Play Framework » Version: 2.1.0

cpe:2.3:a:lightbend:play_framework:2.1.0
Lightbend » Play Framework » Version: 2.1.1

cpe:2.3:a:lightbend:play_framework:2.1.1
Lightbend » Play Framework » Version: 2.2.0

cpe:2.3:a:lightbend:play_framework:2.2.0
Lightbend » Play Framework » Version: 2.2.1

cpe:2.3:a:lightbend:play_framework:2.2.1
Lightbend » Play Framework » Version: 2.2.2

cpe:2.3:a:lightbend:play_framework:2.2.2
Lightbend » Play Framework » Version: 2.2.6

cpe:2.3:a:lightbend:play_framework:2.2.6
Lightbend » Play Framework » Version: 2.3.0

cpe:2.3:a:lightbend:play_framework:2.3.0
Lightbend » Play Framework » Version: 2.3.1

cpe:2.3:a:lightbend:play_framework:2.3.1
Lightbend » Play Framework » Version: 2.3.2

cpe:2.3:a:lightbend:play_framework:2.3.2
Lightbend » Play Framework » Version: 2.3.3

cpe:2.3:a:lightbend:play_framework:2.3.3
Lightbend » Play Framework » Version: 2.3.4

cpe:2.3:a:lightbend:play_framework:2.3.4
Lightbend » Play Framework » Version: 2.3.5

cpe:2.3:a:lightbend:play_framework:2.3.5
Lightbend » Play Framework » Version: 2.3.6

cpe:2.3:a:lightbend:play_framework:2.3.6
Lightbend » Play Framework » Version: 2.3.7

cpe:2.3:a:lightbend:play_framework:2.3.7
Lightbend » Play Framework » Version: 2.3.8

cpe:2.3:a:lightbend:play_framework:2.3.8
Netty » Netty » Version: N/A

cpe:2.3:a:netty:netty:-
Netty » Netty » Version: 3.10.0

cpe:2.3:a:netty:netty:3.10.0
Netty » Netty » Version: 3.10.1

cpe:2.3:a:netty:netty:3.10.1
Netty » Netty » Version: 3.10.2

cpe:2.3:a:netty:netty:3.10.2
Netty » Netty » Version: 3.2.10

cpe:2.3:a:netty:netty:3.2.10
Netty » Netty » Version: 3.2.4

cpe:2.3:a:netty:netty:3.2.4
Netty » Netty » Version: 3.2.5

cpe:2.3:a:netty:netty:3.2.5
Netty » Netty » Version: 3.2.6

cpe:2.3:a:netty:netty:3.2.6
Netty » Netty » Version: 3.2.7

cpe:2.3:a:netty:netty:3.2.7
Netty » Netty » Version: 3.2.8

cpe:2.3:a:netty:netty:3.2.8
Netty » Netty » Version: 3.2.9

cpe:2.3:a:netty:netty:3.2.9
Netty » Netty » Version: 3.3.0

cpe:2.3:a:netty:netty:3.3.0
Netty » Netty » Version: 3.3.1

cpe:2.3:a:netty:netty:3.3.1
Netty » Netty » Version: 3.4.0

cpe:2.3:a:netty:netty:3.4.0
Netty » Netty » Version: 3.4.1

cpe:2.3:a:netty:netty:3.4.1
Netty » Netty » Version: 3.4.2

cpe:2.3:a:netty:netty:3.4.2
Netty » Netty » Version: 3.4.3

cpe:2.3:a:netty:netty:3.4.3
Netty » Netty » Version: 3.4.4

cpe:2.3:a:netty:netty:3.4.4
Netty » Netty » Version: 3.4.5

cpe:2.3:a:netty:netty:3.4.5
Netty » Netty » Version: 3.4.6

cpe:2.3:a:netty:netty:3.4.6
Netty » Netty » Version: 3.5.0

cpe:2.3:a:netty:netty:3.5.0
Netty » Netty » Version: 3.5.1

cpe:2.3:a:netty:netty:3.5.1
Netty » Netty » Version: 3.5.10

cpe:2.3:a:netty:netty:3.5.10
Netty » Netty » Version: 3.5.11

cpe:2.3:a:netty:netty:3.5.11
Netty » Netty » Version: 3.5.12

cpe:2.3:a:netty:netty:3.5.12
Netty » Netty » Version: 3.5.13

cpe:2.3:a:netty:netty:3.5.13
Netty » Netty » Version: 3.5.2

cpe:2.3:a:netty:netty:3.5.2
Netty » Netty » Version: 3.5.3

cpe:2.3:a:netty:netty:3.5.3
Netty » Netty » Version: 3.5.4

cpe:2.3:a:netty:netty:3.5.4
Netty » Netty » Version: 3.5.5

cpe:2.3:a:netty:netty:3.5.5
Netty » Netty » Version: 3.5.6

cpe:2.3:a:netty:netty:3.5.6
Netty » Netty » Version: 3.5.7

cpe:2.3:a:netty:netty:3.5.7
Netty » Netty » Version: 3.5.8

cpe:2.3:a:netty:netty:3.5.8
Netty » Netty » Version: 3.5.9

cpe:2.3:a:netty:netty:3.5.9
Netty » Netty » Version: 3.6.0

cpe:2.3:a:netty:netty:3.6.0
Netty » Netty » Version: 3.6.1

cpe:2.3:a:netty:netty:3.6.1
Netty » Netty » Version: 3.6.10

cpe:2.3:a:netty:netty:3.6.10
Netty » Netty » Version: 3.6.2

cpe:2.3:a:netty:netty:3.6.2
Netty » Netty » Version: 3.6.3

cpe:2.3:a:netty:netty:3.6.3
Netty » Netty » Version: 3.6.4

cpe:2.3:a:netty:netty:3.6.4
Netty » Netty » Version: 3.6.5

cpe:2.3:a:netty:netty:3.6.5
Netty » Netty » Version: 3.6.6

cpe:2.3:a:netty:netty:3.6.6
Netty » Netty » Version: 3.6.7

cpe:2.3:a:netty:netty:3.6.7
Netty » Netty » Version: 3.6.8

cpe:2.3:a:netty:netty:3.6.8
Netty » Netty » Version: 3.6.9

cpe:2.3:a:netty:netty:3.6.9
Netty » Netty » Version: 3.7.0

cpe:2.3:a:netty:netty:3.7.0
Netty » Netty » Version: 3.7.1

cpe:2.3:a:netty:netty:3.7.1
Netty » Netty » Version: 3.8.0

cpe:2.3:a:netty:netty:3.8.0
Netty » Netty » Version: 3.8.1

cpe:2.3:a:netty:netty:3.8.1
Netty » Netty » Version: 3.8.2

cpe:2.3:a:netty:netty:3.8.2
Netty » Netty » Version: 3.8.3

cpe:2.3:a:netty:netty:3.8.3
Netty » Netty » Version: 3.9.0

cpe:2.3:a:netty:netty:3.9.0
Netty » Netty » Version: 3.9.1

cpe:2.3:a:netty:netty:3.9.1
Netty » Netty » Version: 3.9.1.1

cpe:2.3:a:netty:netty:3.9.1.1
Netty » Netty » Version: 3.9.2

cpe:2.3:a:netty:netty:3.9.2
Netty » Netty » Version: 3.9.3

cpe:2.3:a:netty:netty:3.9.3
Netty » Netty » Version: 3.9.4

cpe:2.3:a:netty:netty:3.9.4
Netty » Netty » Version: 3.9.5

cpe:2.3:a:netty:netty:3.9.5
Netty » Netty » Version: 3.9.6

cpe:2.3:a:netty:netty:3.9.6
Netty » Netty » Version: 3.9.7

cpe:2.3:a:netty:netty:3.9.7
Netty » Netty » Version: 4.0.0

cpe:2.3:a:netty:netty:4.0.0
Netty » Netty » Version: 4.0.1

cpe:2.3:a:netty:netty:4.0.1
Netty » Netty » Version: 4.0.10

cpe:2.3:a:netty:netty:4.0.10
Netty » Netty » Version: 4.0.11

cpe:2.3:a:netty:netty:4.0.11
Netty » Netty » Version: 4.0.12

cpe:2.3:a:netty:netty:4.0.12
Netty » Netty » Version: 4.0.13

cpe:2.3:a:netty:netty:4.0.13
Netty » Netty » Version: 4.0.14

cpe:2.3:a:netty:netty:4.0.14
Netty » Netty » Version: 4.0.15

cpe:2.3:a:netty:netty:4.0.15
Netty » Netty » Version: 4.0.16

cpe:2.3:a:netty:netty:4.0.16
Netty » Netty » Version: 4.0.17

cpe:2.3:a:netty:netty:4.0.17
Netty » Netty » Version: 4.0.18

cpe:2.3:a:netty:netty:4.0.18
Netty » Netty » Version: 4.0.19

cpe:2.3:a:netty:netty:4.0.19
Netty » Netty » Version: 4.0.2

cpe:2.3:a:netty:netty:4.0.2
Netty » Netty » Version: 4.0.20

cpe:2.3:a:netty:netty:4.0.20
Netty » Netty » Version: 4.0.21

cpe:2.3:a:netty:netty:4.0.21
Netty » Netty » Version: 4.0.22

cpe:2.3:a:netty:netty:4.0.22
Netty » Netty » Version: 4.0.23

cpe:2.3:a:netty:netty:4.0.23
Netty » Netty » Version: 4.0.24

cpe:2.3:a:netty:netty:4.0.24
Netty » Netty » Version: 4.0.25

cpe:2.3:a:netty:netty:4.0.25
Netty » Netty » Version: 4.0.26

cpe:2.3:a:netty:netty:4.0.26
Netty » Netty » Version: 4.0.27

cpe:2.3:a:netty:netty:4.0.27
Netty » Netty » Version: 4.0.3

cpe:2.3:a:netty:netty:4.0.3
Netty » Netty » Version: 4.0.4

cpe:2.3:a:netty:netty:4.0.4
Netty » Netty » Version: 4.0.5

cpe:2.3:a:netty:netty:4.0.5
Netty » Netty » Version: 4.0.6

cpe:2.3:a:netty:netty:4.0.6
Netty » Netty » Version: 4.0.7

cpe:2.3:a:netty:netty:4.0.7
Netty » Netty » Version: 4.0.8

cpe:2.3:a:netty:netty:4.0.8
Netty » Netty » Version: 4.0.9

cpe:2.3:a:netty:netty:4.0.9
Netty » Netty » Version: 4.1.0

cpe:2.3:a:netty:netty:4.1.0
Playframework » Play Framework » Version: 2.0

cpe:2.3:a:playframework:play_framework:2.0
Playframework » Play Framework » Version: 2.0.1

cpe:2.3:a:playframework:play_framework:2.0.1
Playframework » Play Framework » Version: 2.1.1

cpe:2.3:a:playframework:play_framework:2.1.1
Playframework » Play Framework » Version: 2.1.2

cpe:2.3:a:playframework:play_framework:2.1.2
Playframework » Play Framework » Version: 2.1.3

cpe:2.3:a:playframework:play_framework:2.1.3
Playframework » Play Framework » Version: 2.1.4

cpe:2.3:a:playframework:play_framework:2.1.4
Playframework » Play Framework » Version: 2.1.5

cpe:2.3:a:playframework:play_framework:2.1.5
Playframework » Play Framework » Version: 2.1.6

cpe:2.3:a:playframework:play_framework:2.1.6
Playframework » Play Framework » Version: 2.2.0

cpe:2.3:a:playframework:play_framework:2.2.0
Playframework » Play Framework » Version: 2.2.1

cpe:2.3:a:playframework:play_framework:2.2.1
Playframework » Play Framework » Version: 2.2.2

cpe:2.3:a:playframework:play_framework:2.2.2
Playframework » Play Framework » Version: 2.2.3

cpe:2.3:a:playframework:play_framework:2.2.3
Playframework » Play Framework » Version: 2.2.4

cpe:2.3:a:playframework:play_framework:2.2.4
Playframework » Play Framework » Version: 2.2.5

cpe:2.3:a:playframework:play_framework:2.2.5
Playframework » Play Framework » Version: 2.3

cpe:2.3:a:playframework:play_framework:2.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-2156

Products

Pricing

Contact Us