CVE-2014-9015
Notifications for a CVE
Stay informed of any changes for a specific CVE.
CVE Descriptions
Drupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a crafted request, as demonstrated by a crafted request to a server that supports both HTTP and HTTPS sessions.
CVE Informations
Related Weaknesses
| Weakness Name | Source | |
|---|---|---|
| Category : Permissions, Privileges, and Access Controls Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control. |
Metrics
| Metrics | Score | Severity | CVSS Vector | Source |
|---|---|---|---|---|
| V2 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P | [email protected] |
EPSS
EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.
EPSS Score
The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.
EPSS Percentile
The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
Products Mentioned
Configuraton 0
Drupal>>Drupal >> Version From (including) 6.0 To (excluding) 6.34
- Drupal>>Drupal >> Version 6.0 (Open CPE detail)
- Drupal>>Drupal >> Version 6.0 (Open CPE detail)
- Drupal>>Drupal >> Version 6.0 (Open CPE detail)
- Drupal>>Drupal >> Version 6.0 (Open CPE detail)
- Drupal>>Drupal >> Version 6.0 (Open CPE detail)
- Drupal>>Drupal >> Version 6.0 (Open CPE detail)
- Drupal>>Drupal >> Version 6.0 (Open CPE detail)
- Drupal>>Drupal >> Version 6.0 (Open CPE detail)
- Drupal>>Drupal >> Version 6.0 (Open CPE detail)
- Drupal>>Drupal >> Version 6.0 (Open CPE detail)
- Drupal>>Drupal >> Version 6.1 (Open CPE detail)
- Drupal>>Drupal >> Version 6.2 (Open CPE detail)
- Drupal>>Drupal >> Version 6.3 (Open CPE detail)
- Drupal>>Drupal >> Version 6.4 (Open CPE detail)
- Drupal>>Drupal >> Version 6.5 (Open CPE detail)
- Drupal>>Drupal >> Version 6.6 (Open CPE detail)
- Drupal>>Drupal >> Version 6.7 (Open CPE detail)
- Drupal>>Drupal >> Version 6.8 (Open CPE detail)
- Drupal>>Drupal >> Version 6.9 (Open CPE detail)
- Drupal>>Drupal >> Version 6.10 (Open CPE detail)
- Drupal>>Drupal >> Version 6.11 (Open CPE detail)
- Drupal>>Drupal >> Version 6.12 (Open CPE detail)
- Drupal>>Drupal >> Version 6.13 (Open CPE detail)
- Drupal>>Drupal >> Version 6.14 (Open CPE detail)
- Drupal>>Drupal >> Version 6.15 (Open CPE detail)
- Drupal>>Drupal >> Version 6.16 (Open CPE detail)
- Drupal>>Drupal >> Version 6.17 (Open CPE detail)
- Drupal>>Drupal >> Version 6.18 (Open CPE detail)
- Drupal>>Drupal >> Version 6.19 (Open CPE detail)
- Drupal>>Drupal >> Version 6.20 (Open CPE detail)
- Drupal>>Drupal >> Version 6.21 (Open CPE detail)
- Drupal>>Drupal >> Version 6.22 (Open CPE detail)
- Drupal>>Drupal >> Version 6.23 (Open CPE detail)
- Drupal>>Drupal >> Version 6.24 (Open CPE detail)
- Drupal>>Drupal >> Version 6.25 (Open CPE detail)
- Drupal>>Drupal >> Version 6.26 (Open CPE detail)
- Drupal>>Drupal >> Version 6.27 (Open CPE detail)
- Drupal>>Drupal >> Version 6.28 (Open CPE detail)
- Drupal>>Drupal >> Version 6.29 (Open CPE detail)
- Drupal>>Drupal >> Version 6.30 (Open CPE detail)
- Drupal>>Drupal >> Version 6.31 (Open CPE detail)
- Drupal>>Drupal >> Version 6.32 (Open CPE detail)
- Drupal>>Drupal >> Version 6.33 (Open CPE detail)
Drupal>>Drupal >> Version From (including) 7.0 To (excluding) 7.34
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.0 (Open CPE detail)
- Drupal>>Drupal >> Version 7.1 (Open CPE detail)
- Drupal>>Drupal >> Version 7.2 (Open CPE detail)
- Drupal>>Drupal >> Version 7.3 (Open CPE detail)
- Drupal>>Drupal >> Version 7.4 (Open CPE detail)
- Drupal>>Drupal >> Version 7.5 (Open CPE detail)
- Drupal>>Drupal >> Version 7.6 (Open CPE detail)
- Drupal>>Drupal >> Version 7.7 (Open CPE detail)
- Drupal>>Drupal >> Version 7.8 (Open CPE detail)
- Drupal>>Drupal >> Version 7.9 (Open CPE detail)
- Drupal>>Drupal >> Version 7.10 (Open CPE detail)
- Drupal>>Drupal >> Version 7.11 (Open CPE detail)
- Drupal>>Drupal >> Version 7.12 (Open CPE detail)
- Drupal>>Drupal >> Version 7.13 (Open CPE detail)
- Drupal>>Drupal >> Version 7.14 (Open CPE detail)
- Drupal>>Drupal >> Version 7.15 (Open CPE detail)
- Drupal>>Drupal >> Version 7.16 (Open CPE detail)
- Drupal>>Drupal >> Version 7.17 (Open CPE detail)
- Drupal>>Drupal >> Version 7.18 (Open CPE detail)
- Drupal>>Drupal >> Version 7.19 (Open CPE detail)
- Drupal>>Drupal >> Version 7.20 (Open CPE detail)
- Drupal>>Drupal >> Version 7.21 (Open CPE detail)
- Drupal>>Drupal >> Version 7.22 (Open CPE detail)
- Drupal>>Drupal >> Version 7.23 (Open CPE detail)
- Drupal>>Drupal >> Version 7.24 (Open CPE detail)
- Drupal>>Drupal >> Version 7.25 (Open CPE detail)
- Drupal>>Drupal >> Version 7.26 (Open CPE detail)
- Drupal>>Drupal >> Version 7.27 (Open CPE detail)
- Drupal>>Drupal >> Version 7.28 (Open CPE detail)
- Drupal>>Drupal >> Version 7.29 (Open CPE detail)
- Drupal>>Drupal >> Version 7.30 (Open CPE detail)
- Drupal>>Drupal >> Version 7.31 (Open CPE detail)
- Drupal>>Drupal >> Version 7.32 (Open CPE detail)
- Drupal>>Drupal >> Version 7.33 (Open CPE detail)
Configuraton 0
Debian>>Debian_linux >> Version 7.0
- Debian>>Debian_linux >> Version 7.0 (Open CPE detail)
References
2025©
tesweb SA
