CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3197

ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.122

EPSS Ranking 93.5%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2015-3197

Openssl » Openssl » Version: 1.0.1

cpe:2.3:a:openssl:openssl:1.0.1
Openssl » Openssl » Version: 1.0.1a

cpe:2.3:a:openssl:openssl:1.0.1a
Openssl » Openssl » Version: 1.0.1b

cpe:2.3:a:openssl:openssl:1.0.1b
Openssl » Openssl » Version: 1.0.1c

cpe:2.3:a:openssl:openssl:1.0.1c
Openssl » Openssl » Version: 1.0.1d

cpe:2.3:a:openssl:openssl:1.0.1d
Openssl » Openssl » Version: 1.0.1e

cpe:2.3:a:openssl:openssl:1.0.1e
Openssl » Openssl » Version: 1.0.1f

cpe:2.3:a:openssl:openssl:1.0.1f
Openssl » Openssl » Version: 1.0.1g

cpe:2.3:a:openssl:openssl:1.0.1g
Openssl » Openssl » Version: 1.0.1h

cpe:2.3:a:openssl:openssl:1.0.1h
Openssl » Openssl » Version: 1.0.1i

cpe:2.3:a:openssl:openssl:1.0.1i
Openssl » Openssl » Version: 1.0.1j

cpe:2.3:a:openssl:openssl:1.0.1j
Openssl » Openssl » Version: 1.0.1k

cpe:2.3:a:openssl:openssl:1.0.1k
Openssl » Openssl » Version: 1.0.1l

cpe:2.3:a:openssl:openssl:1.0.1l
Openssl » Openssl » Version: 1.0.1m

cpe:2.3:a:openssl:openssl:1.0.1m
Openssl » Openssl » Version: 1.0.1n

cpe:2.3:a:openssl:openssl:1.0.1n
Openssl » Openssl » Version: 1.0.1o

cpe:2.3:a:openssl:openssl:1.0.1o
Openssl » Openssl » Version: 1.0.1p

cpe:2.3:a:openssl:openssl:1.0.1p
Openssl » Openssl » Version: 1.0.1q

cpe:2.3:a:openssl:openssl:1.0.1q
Openssl » Openssl » Version: 1.0.2

cpe:2.3:a:openssl:openssl:1.0.2
Openssl » Openssl » Version: 1.0.2a

cpe:2.3:a:openssl:openssl:1.0.2a
Openssl » Openssl » Version: 1.0.2b

cpe:2.3:a:openssl:openssl:1.0.2b
Openssl » Openssl » Version: 1.0.2c

cpe:2.3:a:openssl:openssl:1.0.2c
Openssl » Openssl » Version: 1.0.2d

cpe:2.3:a:openssl:openssl:1.0.2d
Openssl » Openssl » Version: 1.0.2e

cpe:2.3:a:openssl:openssl:1.0.2e
Oracle » Exalogic Infrastructure » Version: 1.0

cpe:2.3:a:oracle:exalogic_infrastructure:1.0
Oracle » Exalogic Infrastructure » Version: 2.0

cpe:2.3:a:oracle:exalogic_infrastructure:2.0
Oracle » Oss Support Tools » Version: 8.11.16.3.8

cpe:2.3:a:oracle:oss_support_tools:8.11.16.3.8
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.53

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.53
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.54

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.55

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55
Oracle » Tuxedo » Version: 12.1.1.0

cpe:2.3:a:oracle:tuxedo:12.1.1.0
Oracle » Vm Virtualbox » Version: 5.0.16

cpe:2.3:a:oracle:vm_virtualbox:5.0.16

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3197

Products

Pricing

Contact Us