{"metadata": {"vulnerability": "rhsa-2015:1513", "count": 19, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 15}, "linked_omitted": 0}, "data": [{"timestamp": "2015-07-10T00:00:00Z", "date_only": false, "value": "2015-07-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2015-5477", "record": "CVE-2015-5477", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2015-07-27T00:00:00Z", "date_only": false, "value": "2015-07-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2015-07-28T00:00:00Z", "date_only": false, "value": "2015-07-28T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 \u00b7 CVE-2015-5477 / mitre", "record": "CVE-2015-5477", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2015-07-28T00:00:00Z", "date_only": false, "value": "2015-07-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2015-07-29T00:32:23Z", "date_only": false, "value": "2015-07-29T00:32:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2015-07-29T00:32:23Z", "date_only": false, "value": "2015-07-29T00:32:23+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2015-07-29T00:32:23Z", "date_only": false, "value": "2015-07-29T00:32:23+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2015-07-29T14:00:00Z", "date_only": false, "value": "2015-07-29T14:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2015-5477", "record": "CVE-2015-5477", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2017-11-09T10:57:01Z", "date_only": false, "value": "2017-11-09T10:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2015-5477 / mitre", "record": "CVE-2015-5477", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-08-06T06:50:02.071Z", "date_only": false, "value": "2024-08-06T06:50:02.071Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2015-5477 / CVE", "record": "CVE-2015-5477", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": true, "value": "2026-10-08", "kind": "other", "label": "Catalog added", "source": "cvelistv5 \u00b7 CVE-2015-5477 / CISA-ADP", "record": "CVE-2015-5477", "field": "containers.adp.1.metrics.2.other.content.dateAdded", "linked_record": true}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-08T20:05:51.069Z", "date_only": false, "value": "2026-10-08T20:05:51.069387Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/secdb/statuses/117406827249675241", "record": "RHSA-2015:1513", "field": "creation_timestamp", "uuid": "bbf4f0ab-6ad9-467d-92c9-f41fa2be1721", "content": "\ud83d\udea8 [CISA-2026:1008] CISA Adds 5 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1008)\nCISA has added 5 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.\n\u26a0\ufe0f CVE-2015-3306 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-3306)- Name: ProFTPD Improper Access Control Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: ProFTPD- Product: ProFTPD- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: http://www.proftpd.org/ ; https://lists.debian.org/debian-security-announce/2015/msg00154.html ; https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-3306\n\u26a0\ufe0f CVE-2015-5477 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-5477)- Name:  ISC BIND Data Processing Errors Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: ISC- Product: BIND- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272 ; https://access.redhat.com/errata/RHSA-2015:1513.html; https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5477\n\u26a0\ufe0f CVE-2016-3081 (https://secdb.nttzen.cloud/cve/detail/CVE-2016-3081)- Name: Apache Struts Command Injection Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Apache- Product: Struts- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://cwiki.apache.org/confluence/display/WW/S2-032 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2016-3081\n\u26a0\ufe0f CVE-2021-3199 (https://secdb.nttzen.cloud/cve/detail/CVE-2021-3199)- Name: ONLYOFFICE Docs Server Path Traversal Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: ONLYOFFICE- Product: Docs- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2021-3199\n\u26a0\ufe0f CVE-2023-22894 (https://secdb.nttzen.cloud/cve/detail/CVE-2023-22894)- Name: Strapi Cleartext Storage of Sensitive Information Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Strapi- Product: Strapi- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve ; https://github.com/strapi/strapi/releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-22894\n#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261008 #cisa20261008 #cve_2015_3306 #cve_2015_5477 #cve_2016_3081 #cve_2021_3199 #cve_2023_22894 #cve20153306 #cve20155477 #cve20163081 #cve20213199 #cve202322894", "url": "https://infosec.exchange/users/secdb/statuses/117406827249675241"}, {"timestamp": "2026-10-09T03:55:29.997Z", "date_only": false, "value": "2026-10-09T03:55:29.997093Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2015-5477 / CISA-ADP", "record": "CVE-2015-5477", "field": "containers.adp.1.metrics.1.other.content.timestamp", "linked_record": true}, {"timestamp": "2026-11-03T23:47:03.092Z", "date_only": false, "value": "2026-11-03T23:47:03.092Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2015-5477", "record": "CVE-2015-5477", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-03T23:47:03.092Z", "date_only": false, "value": "2026-11-03T23:47:03.092Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2015-5477 / CISA-ADP", "record": "CVE-2015-5477", "field": "containers.adp.1.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-07T05:09:58Z", "date_only": false, "value": "2026-11-07T05:09:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-11-07T05:09:58Z", "date_only": false, "value": "2026-11-07T05:09:58+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "document.tracking.generator.date"}, {"timestamp": "2026-11-07T05:09:58Z", "date_only": false, "value": "2026-11-07T05:09:58+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-11-15T03:26:33.184Z", "anchors": {"origin": {"timestamp": "2015-07-27T00:00:00Z", "date_only": false, "value": "2015-07-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2015-07-27T00:00:00Z", "date_only": false, "value": "2015-07-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2015-07-28T00:00:00Z", "date_only": false, "value": "2015-07-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2015-07-29T00:32:23Z", "date_only": false, "value": "2015-07-29T00:32:23+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 174743.0, "hours": 48.539722222222224, "days": 2.022488425925926, "min_seconds": 88343.0, "max_seconds": 174743.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2015-07-27T00:00:00Z", "date_only": false, "value": "2015-07-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2015-07-29T00:32:23Z", "date_only": false, "value": "2015-07-29T00:32:23+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, "discovery_after_disclosure": false}, "disclosure_to_patch": {"available": true, "seconds": 88343.0, "hours": 24.539722222222224, "days": 1.022488425925926, "min_seconds": 1943.0, "max_seconds": 88343.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2015-07-28T00:00:00Z", "date_only": false, "value": "2015-07-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2015-07-29T00:32:23Z", "date_only": false, "value": "2015-07-29T00:32:23+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 174743.0, "hours": 48.539722222222224, "days": 2.022488425925926, "min_seconds": 88343.0, "max_seconds": 174743.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2015-07-27T00:00:00Z", "date_only": false, "value": "2015-07-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2015-07-29T00:32:23Z", "date_only": false, "value": "2015-07-29T00:32:23+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat", "record": "rhsa-2015:1513", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}