Language:
Severity: Critical
ID: 98831
Type: remote
Family: Component Vulnerability
Published: 1/9/2019
Updated: 1/20/2022
Scan Template: pci, api, scan
Risk Factor: Medium
Score: 5.9
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2015-4599
Risk Factor: Critical
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score Source: CVE-2015-1351
CPE: cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Exploit Ease: No known exploits are available
Patch Publication Date: 3/30/2015
Vulnerability Publication Date: 3/30/2015
CVE: CVE-2015-1351, CVE-2015-2783, CVE-2015-3329, CVE-2015-3411, CVE-2015-3412, CVE-2015-4599, CVE-2015-4600, CVE-2015-4601, CVE-2015-4602, CVE-2015-4603, CVE-2015-1352, CVE-2015-3330, CVE-2015-3307, CVE-2015-4604, CVE-2015-4605
OWASP: 2013-A9, 2017-A9, 2017-A6, 2013-A5, 2010-A6, 2010-A4, 2013-A4, 2017-A5, 2021-A6, 2021-A1, 2021-A3
WASC: Information Leakage, Improper Input Handling, Buffer Overflow
OWASP API: 2019-API7
HIPAA: 164.306(a)(1), 164.306(a)(2)
DISA STIG: APSC-DV-002630, APSC-DV-000460, APSC-DV-002560, APSC-DV-002590
OWASP ASVS: 4.0.2-14.2.1, 4.0.2-8.3.4, 4.0.2-5.1.3
PCI-DSS: 3.2-6.2, 3.2-6.5.8, 3.2-6.5, 3.2-6.5.2
ISO: 27001-A.14.2.5, 27001-A.12.6.1
CAPEC: 116, 13, 169, 22, 224, 285, 287, 290, 291, 292, 293, 294, 295, 296, 297, 298, 299, 300, 301, 302, 303, 304, 305, 306, 307, 308, 309, 310, 312, 313, 317, 318, 319, 320, 321, 322, 323, 324, 325, 326, 327, 328, 329, 330, 472, 497, 508, 573, 574, 575, 576, 577, 59, 60, 616, 643, 646, 651, 79, 64, 78, 100, 230, 231, 10, 123, 14, 209, 24, 42, 44, 45, 46, 47, 588, 63, 8, 85, 9, 101, 104, 108, 109, 110, 120, 135, 136, 153, 182, 23, 250, 261, 267, 28, 3, 31, 43, 473, 52, 53, 67, 7, 71, 72, 73, 80, 81, 83, 88
NIST: sp800_53-CM-6b, sp800_53-SI-10, sp800_53-SI-15, sp800_53-SI-16