CVE-2015-5182

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Cross-site request forgery (CSRF) vulnerability in the jolokia API in A-MQ.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Sep 25, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-51837.5Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ.CVE-2015-51847.5Console: CORS headers set to allow all in Red Hat AMQ.CVE-2015-51855.0The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service (NULL poinCVE-2015-51865.3Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.CVE-2015-51876.5Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web traffiCVE-2015-51886.8Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat Enterprise Application Platform before 6.4.4 andCVE-2015-51894.9Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gCVE-2015-51908.5The pcsd web UI in PCS 0.9.139 and earlier allows remote authenticated users to execute arbitrary commands via "escape characters" in a URL.CVE-2015-51916.7VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. SuccessCVE-2015-51947.5The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crCVE-2015-51957.5ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statiCVE-2015-51987.2libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related t
CVE-2015-5182: High severity, CVSS 8.8 | Vulnix