# Vulnerabilities published in 2015


- [CVE-2015-6472](https://insights.sbomify.com/CVE-2015-6472/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2015-6471](https://insights.sbomify.com/CVE-2015-6471/): Information disclosure in n/a (medium 5.3)
- [CVE-2015-6470](https://insights.sbomify.com/CVE-2015-6470/): Missing authorization in n/a (medium 5.5)
- [CVE-2015-6469](https://insights.sbomify.com/CVE-2015-6469/): Information disclosure in n/a (medium 5.0)
- [CVE-2015-6468](https://insights.sbomify.com/CVE-2015-6468/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2015-6467](https://insights.sbomify.com/CVE-2015-6467/): Code injection in n/a (high 8.1)
- [CVE-2015-6466](https://insights.sbomify.com/CVE-2015-6466/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-6465](https://insights.sbomify.com/CVE-2015-6465/): Denial of service in n/a (medium 6.8)
- [CVE-2015-6464](https://insights.sbomify.com/CVE-2015-6464/): Security feature bypass in n/a (high 8.5)
- [CVE-2015-6463](https://insights.sbomify.com/CVE-2015-6463/): XML external entity in n/a (medium 5.8)
- [CVE-2015-6462](https://insights.sbomify.com/CVE-2015-6462/): Cross-site scripting in Schneider Electric Modicon PLC (medium 5.4)
- [CVE-2015-6461](https://insights.sbomify.com/CVE-2015-6461/): File upload in Schneider Electric Modicon PLC (medium 5.4)
- [CVE-2015-6460](https://insights.sbomify.com/CVE-2015-6460/): Memory corruption in 3S-Smart CODESYS Gateway Server (high 7.5)
- [CVE-2015-6459](https://insights.sbomify.com/CVE-2015-6459/): Path traversal in n/a (critical 10.0)
- [CVE-2015-6458](https://insights.sbomify.com/CVE-2015-6458/): Memory corruption in SoftCMS (high 8.8)
- [CVE-2015-6457](https://insights.sbomify.com/CVE-2015-6457/): Memory corruption in SoftCMS (high 8.8)
- [CVE-2015-6456](https://insights.sbomify.com/CVE-2015-6456/): Hardcoded credentials in n/a (critical 9.0)
- [CVE-2015-6454](https://insights.sbomify.com/CVE-2015-6454/): Null dereference in n/a (medium 5.0)
- [CVE-2015-6435](https://insights.sbomify.com/CVE-2015-6435/): Command injection in n/a (critical 9.8)
- [CVE-2015-6434](https://insights.sbomify.com/CVE-2015-6434/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2015-6433](https://insights.sbomify.com/CVE-2015-6433/): SQL injection in n/a (medium 6.5)
- [CVE-2015-6432](https://insights.sbomify.com/CVE-2015-6432/): Denial of service in n/a (high 7.5)
- [CVE-2015-6431](https://insights.sbomify.com/CVE-2015-6431/): Denial of service in n/a (medium 6.5)
- [CVE-2015-6429](https://insights.sbomify.com/CVE-2015-6429/): Denial of service in n/a (medium 5.0)
- [CVE-2015-6428](https://insights.sbomify.com/CVE-2015-6428/): Information disclosure in n/a (medium 5.0)
- [CVE-2015-6427](https://insights.sbomify.com/CVE-2015-6427/): Security feature bypass in n/a (medium 5.0)
- [CVE-2015-6426](https://insights.sbomify.com/CVE-2015-6426/): Command injection in n/a (high 7.2)
- [CVE-2015-6425](https://insights.sbomify.com/CVE-2015-6425/): Denial of service in n/a (medium 5.0)
- [CVE-2015-6424](https://insights.sbomify.com/CVE-2015-6424/): Privilege escalation in n/a (high 7.2)
- [CVE-2015-6423](https://insights.sbomify.com/CVE-2015-6423/): Security feature bypass in n/a (medium 4.3)
- [CVE-2015-6422](https://insights.sbomify.com/CVE-2015-6422/): Denial of service in n/a (medium 4.0)
- [CVE-2015-6421](https://insights.sbomify.com/CVE-2015-6421/): Denial of service in n/a (high 7.5)
- [CVE-2015-6420](https://insights.sbomify.com/CVE-2015-6420/): Insecure Deserialization in Apache Commons Collection (critical 9.8)
- [CVE-2015-6419](https://insights.sbomify.com/CVE-2015-6419/): Information disclosure in n/a (medium 6.8)
- [CVE-2015-6418](https://insights.sbomify.com/CVE-2015-6418/): Weak cryptography in n/a (medium 4.3)
- [CVE-2015-6417](https://insights.sbomify.com/CVE-2015-6417/): Missing authorization in n/a (medium 6.5)
- [CVE-2015-6416](https://insights.sbomify.com/CVE-2015-6416/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-6415](https://insights.sbomify.com/CVE-2015-6415/): Denial of service in n/a (high 7.1)
- [CVE-2015-6414](https://insights.sbomify.com/CVE-2015-6414/): Weak cryptography in n/a (low 2.1)
- [CVE-2015-6413](https://insights.sbomify.com/CVE-2015-6413/): Missing authorization in n/a (medium 4.0)
- [CVE-2015-6412](https://insights.sbomify.com/CVE-2015-6412/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2015-6411](https://insights.sbomify.com/CVE-2015-6411/): Information disclosure in n/a (medium 5.0)
- [CVE-2015-6410](https://insights.sbomify.com/CVE-2015-6410/): Auth bypass in n/a (medium 4.0)
- [CVE-2015-6409](https://insights.sbomify.com/CVE-2015-6409/): Security feature bypass in n/a (medium 5.9)
- [CVE-2015-6408](https://insights.sbomify.com/CVE-2015-6408/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2015-6407](https://insights.sbomify.com/CVE-2015-6407/): File upload in n/a (medium 4.0)
- [CVE-2015-6406](https://insights.sbomify.com/CVE-2015-6406/): Path traversal in n/a (medium 4.0)
- [CVE-2015-6405](https://insights.sbomify.com/CVE-2015-6405/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2015-6404](https://insights.sbomify.com/CVE-2015-6404/): Information disclosure in n/a (medium 4.0)
- [CVE-2015-6403](https://insights.sbomify.com/CVE-2015-6403/): Other in n/a (high 7.2)
- [CVE-2015-6402](https://insights.sbomify.com/CVE-2015-6402/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-6401](https://insights.sbomify.com/CVE-2015-6401/): Auth bypass in n/a (high 7.5)
- [CVE-2015-6400](https://insights.sbomify.com/CVE-2015-6400/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-6399](https://insights.sbomify.com/CVE-2015-6399/): Denial of service in n/a (medium 6.8)
- [CVE-2015-6398](https://insights.sbomify.com/CVE-2015-6398/): Denial of service in n/a (high 7.5)
- [CVE-2015-6397](https://insights.sbomify.com/CVE-2015-6397/): Privilege escalation in n/a (high 8.8)
- [CVE-2015-6396](https://insights.sbomify.com/CVE-2015-6396/): Command injection in n/a (high 7.8)
- [CVE-2015-6395](https://insights.sbomify.com/CVE-2015-6395/): Missing authorization in n/a (medium 6.5)
- [CVE-2015-6394](https://insights.sbomify.com/CVE-2015-6394/): Denial of service in n/a (medium 4.9)
- [CVE-2015-6393](https://insights.sbomify.com/CVE-2015-6393/): Denial of service in n/a (high 7.5)
- [CVE-2015-6392](https://insights.sbomify.com/CVE-2015-6392/): Denial of service in n/a (high 7.5)
- [CVE-2015-6391](https://insights.sbomify.com/CVE-2015-6391/): Denial of service in n/a (high 7.8)
- [CVE-2015-6390](https://insights.sbomify.com/CVE-2015-6390/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-6389](https://insights.sbomify.com/CVE-2015-6389/): Hardcoded credentials in n/a (critical 9.0)
- [CVE-2015-6388](https://insights.sbomify.com/CVE-2015-6388/): Server-side request forgery in n/a (medium 5.0)
- [CVE-2015-6387](https://insights.sbomify.com/CVE-2015-6387/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-6386](https://insights.sbomify.com/CVE-2015-6386/): Denial of service in n/a (medium 5.0)
- [CVE-2015-6385](https://insights.sbomify.com/CVE-2015-6385/): Command injection in n/a (high 7.2)
- [CVE-2015-6384](https://insights.sbomify.com/CVE-2015-6384/): Missing authorization in n/a (medium 4.3)
- [CVE-2015-6383](https://insights.sbomify.com/CVE-2015-6383/): Privilege escalation in n/a (high 7.2)
- [CVE-2015-6382](https://insights.sbomify.com/CVE-2015-6382/): Denial of service in n/a (medium 5.0)
- [CVE-2015-6380](https://insights.sbomify.com/CVE-2015-6380/): Command injection in n/a (medium 6.5)
- [CVE-2015-6379](https://insights.sbomify.com/CVE-2015-6379/): Denial of service in n/a (medium 6.8)
- [CVE-2015-6378](https://insights.sbomify.com/CVE-2015-6378/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2015-6377](https://insights.sbomify.com/CVE-2015-6377/): Denial of service in n/a (high 7.8)
- [CVE-2015-6376](https://insights.sbomify.com/CVE-2015-6376/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2015-6375](https://insights.sbomify.com/CVE-2015-6375/): Information disclosure in n/a (low 2.1)
- [CVE-2015-6374](https://insights.sbomify.com/CVE-2015-6374/): Other in n/a (medium 4.3)
- [CVE-2015-6373](https://insights.sbomify.com/CVE-2015-6373/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2015-6372](https://insights.sbomify.com/CVE-2015-6372/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-6371](https://insights.sbomify.com/CVE-2015-6371/): Information disclosure in n/a (medium 4.0)
- [CVE-2015-6370](https://insights.sbomify.com/CVE-2015-6370/): Command injection in n/a (high 7.2)
- [CVE-2015-6369](https://insights.sbomify.com/CVE-2015-6369/): Denial of service in n/a (medium 4.9)
- [CVE-2015-6368](https://insights.sbomify.com/CVE-2015-6368/): Information disclosure in n/a (medium 5.0)
- [CVE-2015-6367](https://insights.sbomify.com/CVE-2015-6367/): Denial of service in n/a (high 7.8)
- [CVE-2015-6366](https://insights.sbomify.com/CVE-2015-6366/): Security feature bypass in n/a (medium 5.0)
- [CVE-2015-6365](https://insights.sbomify.com/CVE-2015-6365/): Security feature bypass in n/a (medium 4.0)
- [CVE-2015-6364](https://insights.sbomify.com/CVE-2015-6364/): Information disclosure in n/a (medium 5.0)
- [CVE-2015-6363](https://insights.sbomify.com/CVE-2015-6363/): Cross-site scripting in n/a (low 3.5)
- [CVE-2015-6362](https://insights.sbomify.com/CVE-2015-6362/): Missing authorization in n/a (medium 4.0)
- [CVE-2015-6361](https://insights.sbomify.com/CVE-2015-6361/): Command injection in n/a (medium 6.5)
- [CVE-2015-6360](https://insights.sbomify.com/CVE-2015-6360/): Denial of service in n/a (high 7.5)
- [CVE-2015-6359](https://insights.sbomify.com/CVE-2015-6359/): Denial of service in n/a (medium 6.1)
- [CVE-2015-6358](https://insights.sbomify.com/CVE-2015-6358/): Hardcoded credentials in n/a (medium 5.9)
- [CVE-2015-6357](https://insights.sbomify.com/CVE-2015-6357/): Security feature bypass in n/a (medium 6.8)
- [CVE-2015-6356](https://insights.sbomify.com/CVE-2015-6356/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-6355](https://insights.sbomify.com/CVE-2015-6355/): Information disclosure in n/a (medium 5.0)
- [CVE-2015-6354](https://insights.sbomify.com/CVE-2015-6354/): Cross-site scripting in n/a (low 3.5)
- [CVE-2015-6353](https://insights.sbomify.com/CVE-2015-6353/): Cross-site scripting in n/a (low 3.5)
- [CVE-2015-6352](https://insights.sbomify.com/CVE-2015-6352/): Information disclosure in n/a (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/26/