7.5

CVE-2015-0818

Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.

Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 36.0.3
Mozilla ≫ Firefox Version31.0
Mozilla ≫ Firefox Version31.1.0
Mozilla ≫ Firefox Version31.1.1
Mozilla ≫ Firefox Version31.3.0
Mozilla ≫ Firefox Version31.5.1
Mozilla ≫ Firefox Version31.5.2
Mozilla ≫ Firefox ESR Version31.1
Mozilla ≫ Firefox ESR Version31.2
Mozilla ≫ Firefox ESR Version31.3
Mozilla ≫ Firefox ESR Version31.4
Mozilla ≫ Firefox ESR Version31.5
Mozilla ≫ Seamonkey Version <= 2.33.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.28% 0.784
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P