CVE-2015-2808

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

• ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
• AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
• Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

73.85% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 99.4% of scored records. A rank, not a probability.

NVD base score

3.7 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2015-04-01 00:00Z11 YR AGO

Last updated

2026-05-28 12:53Z5 MO AGO

Reserved

2015-03-31

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Low (CVSS 3.7)

CNA CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses

• CWE-327Use of a Broken or Risky Cryptographic AlgorithmClass

Data version

5.2

Document digest

d01a9659b21bd6c88e54ea8e49712bebc6b90b612e41f1631eeabfe7ca72e837

• marc.infoSSRT102127http://marc.info/?l=bugtraq&m=143818140118771&w=2vendor-advisory
• rhn.redhat.comRHSA-2015:1243http://rhn.redhat.com/errata/RHSA-2015-1243.htmlvendor-advisory
• rhn.redhat.comRHSA-2015:1007http://rhn.redhat.com/errata/RHSA-2015-1007.htmlvendor-advisory
• marc.infoHPSBGN03367http://marc.info/?l=bugtraq&m=143817899717054&w=2vendor-advisory
• marc.infoHPSBUX03512http://marc.info/?l=bugtraq&m=144493176821532&w=2vendor-advisory
• www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
• rhn.redhat.comRHSA-2015:1006http://rhn.redhat.com/errata/RHSA-2015-1006.htmlvendor-advisory
• h20564.www2.hpe.comhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256
• kb.juniper.nethttps://kb.juniper.net/JSA10783
• www.securitytracker.com1033737http://www.securitytracker.com/id/1033737vdb-entry
• lists.opensuse.orgSUSE-SU-2015:2192http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.htmlvendor-advisory
• marc.infoHPSBGN03399http://marc.info/?l=bugtraq&m=144060576831314&w=2vendor-advisory
• www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
• www.securitytracker.com1036222http://www.securitytracker.com/id/1036222vdb-entry
• h20564.www2.hpe.comhttp://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034
• www-304.ibm.comhttp://www-304.ibm.com/support/docview.wss?uid=swg21960769
• security.gentoo.orgGLSA-201512-10https://security.gentoo.org/glsa/201512-10vendor-advisory
• rhn.redhat.comRHSA-2015:1229http://rhn.redhat.com/errata/RHSA-2015-1229.htmlvendor-advisory
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650
• www.securitytracker.com1032600http://www.securitytracker.com/id/1032600vdb-entry
• www.securitytracker.com1032910http://www.securitytracker.com/id/1032910vdb-entry
• www.ubuntu.comUSN-2706-1http://www.ubuntu.com/usn/USN-2706-1vendor-advisory
• rhn.redhat.comRHSA-2015:1526http://rhn.redhat.com/errata/RHSA-2015-1526.htmlvendor-advisory
• marc.infoSSRT102133http://marc.info/?l=bugtraq&m=143817021313142&w=2vendor-advisory
• www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
• www.securitytracker.com1032599http://www.securitytracker.com/id/1032599vdb-entry
• marc.infoHPSBMU03401http://marc.info/?l=bugtraq&m=144104533800819&w=2vendor-advisory
• www-304.ibm.comhttp://www-304.ibm.com/support/docview.wss?uid=swg21903565
• h20564.www2.hpe.comhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380
• kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10163
• marc.infoHPSBMU03345http://marc.info/?l=bugtraq&m=144043644216842&w=2vendor-advisory
• www.securitytracker.com1032734http://www.securitytracker.com/id/1032734vdb-entry
• www-01.ibm.comIV71892http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892vendor-advisory
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347
• www.securitytracker.com1033769http://www.securitytracker.com/id/1033769vdb-entry
• www.securitytracker.com1032707http://www.securitytracker.com/id/1032707vdb-entry
• lists.opensuse.orgopenSUSE-SU-2015:1289http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.htmlvendor-advisory
• rhn.redhat.comRHSA-2015:1091http://rhn.redhat.com/errata/RHSA-2015-1091.htmlvendor-advisory
• marc.infoHPSBGN03402http://marc.info/?l=bugtraq&m=144069189622016&w=2vendor-advisory
• www-01.ibm.comIV71888http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888vendor-advisory
• rhn.redhat.comRHSA-2015:1228http://rhn.redhat.com/errata/RHSA-2015-1228.htmlvendor-advisory
• marc.infoHPSBGN03405http://marc.info/?l=bugtraq&m=144060606031437&w=2vendor-advisory
• www.securitytracker.com1032708http://www.securitytracker.com/id/1032708vdb-entry
• www.huawei.comhttp://www.huawei.com/en/psirt/security-advisories/hw-454055
• www.debian.orgDSA-3316http://www.debian.org/security/2015/dsa-3316vendor-advisory
• lists.opensuse.orgSUSE-SU-2015:2166http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.htmlvendor-advisory
• www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
• www.securitytracker.com1033415http://www.securitytracker.com/id/1033415vdb-entry
• h20564.www2.hpe.comhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246
• www-947.ibm.comhttps://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709
• marc.infoHPSBGN03403http://marc.info/?l=bugtraq&m=144104565600964&w=2vendor-advisory
• www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21883640
• marc.infoHPSBGN03407http://marc.info/?l=bugtraq&m=144102017024820&w=2vendor-advisory
• www.securitytracker.com1033432http://www.securitytracker.com/id/1033432vdb-entry
• marc.infoHPSBGN03354http://marc.info/?l=bugtraq&m=143629696317098&w=2vendor-advisory
• lists.opensuse.orgSUSE-SU-2015:1138http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.htmlvendor-advisory
• www.securitytracker.com1032858http://www.securitytracker.com/id/1032858vdb-entry
• h20564.www2.hp.comSSRT102073https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922vendor-advisory
• www.securitytracker.com1032788http://www.securitytracker.com/id/1032788vdb-entry
• www.ubuntu.comUSN-2696-1http://www.ubuntu.com/usn/USN-2696-1vendor-advisory
• www.blackhat.comhttps://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf
• www.debian.orgDSA-3339http://www.debian.org/security/2015/dsa-3339vendor-advisory
• rhn.redhat.comRHSA-2015:1020http://rhn.redhat.com/errata/RHSA-2015-1020.htmlvendor-advisory
• rhn.redhat.comRHSA-2015:1242http://rhn.redhat.com/errata/RHSA-2015-1242.htmlvendor-advisory
• kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727
• h20564.www2.hpe.comhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241
• lists.opensuse.orgSUSE-SU-2015:1086http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.htmlvendor-advisory
• www.securitytracker.com1033431http://www.securitytracker.com/id/1033431vdb-entry
• www1.huawei.comhttp://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988
• www.securitytracker.com1032868http://www.securitytracker.com/id/1032868vdb-entry
• marc.infoHPSBGN03415http://marc.info/?l=bugtraq&m=144059703728085&w=2vendor-advisory
• www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
• www.securityfocus.com91787http://www.securityfocus.com/bid/91787vdb-entry
• lists.opensuse.orgSUSE-SU-2015:1319http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.htmlvendor-advisory
• lists.opensuse.orgSUSE-SU-2015:1320http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.htmlvendor-advisory
• lists.opensuse.orgopenSUSE-SU-2015:1288http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.htmlvendor-advisory
• rhn.redhat.comRHSA-2015:1241http://rhn.redhat.com/errata/RHSA-2015-1241.htmlvendor-advisory
• h20564.www2.hpe.comhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140
• kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
• rhn.redhat.comRHSA-2015:1230http://rhn.redhat.com/errata/RHSA-2015-1230.htmlvendor-advisory
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888
• marc.infoHPSBGN03338http://marc.info/?l=bugtraq&m=143456209711959&w=2vendor-advisory
• www.securitytracker.com1033386http://www.securitytracker.com/id/1033386vdb-entry
• marc.infoHPSBMU03377http://marc.info/?l=bugtraq&m=143741441012338&w=2vendor-advisory
• www.securitytracker.com1033072http://www.securitytracker.com/id/1033072vdb-entry
• h20564.www2.hpe.comhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789
• lists.opensuse.orgSUSE-SU-2015:1085http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.htmlvendor-advisory
• h20564.www2.hpe.comhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119
• rhn.redhat.comRHSA-2015:1021http://rhn.redhat.com/errata/RHSA-2015-1021.htmlvendor-advisory
• www-304.ibm.comhttp://www-304.ibm.com/support/docview.wss?uid=swg21960015
• lists.opensuse.orgSUSE-SU-2015:1073http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.htmlvendor-advisory
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935
• lists.opensuse.orgSUSE-SU-2015:1161http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.htmlvendor-advisory
• marc.infoHPSBGN03414http://marc.info/?l=bugtraq&m=144059660127919&w=2vendor-advisory
• www.securityfocus.com73684http://www.securityfocus.com/bid/73684vdb-entry
• www.securitytracker.com1032990http://www.securitytracker.com/id/1032990vdb-entry
• www.securitytracker.com1033071http://www.securitytracker.com/id/1033071vdb-entry
• lists.opensuse.orgSUSE-SU-2016:0113http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.htmlvendor-advisory
• www.secpod.comhttps://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2/