CVE-2015-4727
UnknownEPSS 2.09%
Last modified
CVE-2015-4727 is a vulnerability of currently unknown severity. Unspecified vulnerability in Oracle Virtualization Sun Ray Software before 5.4.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Console.. EPSS estimates a 2.09% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in Oracle Virtualization Sun Ray Software before 5.4.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Console.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Virtualization Sun Ray | <= 5.4.3 |
References
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.htmlPatch, Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-4727?
Unspecified vulnerability in Oracle Virtualization Sun Ray Software before 5.4.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Console.
How severe is CVE-2015-4727?
Severity scoring for CVE-2015-4727 is pending analysis. The EPSS model estimates a 2.09% probability of exploitation in the next 30 days.
How do I fix CVE-2015-4727?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-4719The client API authentication mechanism in Pexip Infinity be…9.8
- CVE-2015-4720Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2015-4721Multiple cross-site scripting (XSS) vulnerabilities in Concr…
- CVE-2015-4724SQL injection vulnerability in Concrete5 5.7.3.1.
- CVE-2015-4725Cross-site scripting (XSS) vulnerability in forgot.php in Au…
- CVE-2015-4726PHP remote file inclusion vulnerability in ajax/myajaxphp.ph…
- CVE-2015-4728Unspecified vulnerability in the Oracle Sourcing component i…
- CVE-2015-4729Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 al…
- CVE-2015-4730Unspecified vulnerability in Oracle MySQL 5.6.20 and earlier…
- CVE-2015-4731Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and …
- CVE-2015-4732Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and …
- CVE-2015-4733Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and …
Are you affected by CVE-2015-4727?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST