What is CVE-2015-5463?

CVE-2015-5463 is a critical-severity vulnerability in Axiomsl Axiom, classified under Improper Authorization. CVSS score: 9.8/10. Published 2019-04-03.

How severe is CVE-2015-5463?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Axiomsl Axiom

CVE-2015-5463

AxiomSL's Axiom java applet module (used for editing uploaded Excel files and associated Java RMI services) 9.5.3 and earlier allows remote attackers to (1) access data of other basic users through arbitrary SQL commands, (2) perform a horizontal and vertical privilege escalation, (3) cause a Denial of Service on global application, or (4) write/read/delete arbitrary files on server hosting the application.

EPSS: 0.020 (79.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Axiomsl Axiom
N/a — versions n/a

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2015-5463?: CVE-2015-5463 is a critical-severity vulnerability in Axiomsl Axiom, classified under Improper Authorization. CVSS score: 9.8/10. Published 2019-04-03.
How severe is CVE-2015-5463?: Critical severity. CVSS v3 base score is 9.8 out of 10.