CVE-2015-3253 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
redhat	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 97%

Vendor	Product	Version
apache	groovy	1.7.0
apache	groovy	1.7.0:beta_1
apache	groovy	1.7.0:beta_2
apache	groovy	1.7.0:rc1
apache	groovy	1.7.0:rc2
apache	groovy	1.7.1
apache	groovy	1.7.2
apache	groovy	1.7.3
apache	groovy	1.7.4
apache	groovy	1.7.5
apache	groovy	1.7.6
apache	groovy	1.7.7
apache	groovy	1.7.8
apache	groovy	1.7.9
apache	groovy	1.7.10
apache	groovy	1.7.11
apache	groovy	1.8.0
apache	groovy	1.8.0:beta_1
apache	groovy	1.8.0:beta_2
apache	groovy	1.8.0:beta_3
apache	groovy	1.8.0:beta_4
apache	groovy	1.8.0:rc1
apache	groovy	1.8.0:rc2
apache	groovy	1.8.0:rc3
apache	groovy	1.8.0:rc4
apache	groovy	1.8.1
apache	groovy	1.8.2
apache	groovy	1.8.3
apache	groovy	1.8.4
apache	groovy	1.8.5
apache	groovy	1.8.6
apache	groovy	1.8.7
apache	groovy	1.8.8
apache	groovy	1.8.9
apache	groovy	1.9.0
apache	groovy	1.9.0:beta_1
apache	groovy	1.9.0:beta_3
apache	groovy	1.9.0:beta_4
apache	groovy	2.0.0
apache	groovy	2.0.0:beta_1
apache	groovy	2.0.0:beta_2
apache	groovy	2.0.0:beta_3
apache	groovy	2.0.0:rc1
apache	groovy	2.0.0:rc2
apache	groovy	2.0.0:rc3
apache	groovy	2.0.0:rc4
apache	groovy	2.0.1
apache	groovy	2.0.2
apache	groovy	2.0.3
apache	groovy	2.0.4
apache	groovy	2.0.5
apache	groovy	2.0.6
apache	groovy	2.0.7
apache	groovy	2.0.8
apache	groovy	2.1.0
apache	groovy	2.1.0:beta_1
apache	groovy	2.1.0:rc1
apache	groovy	2.1.0:rc2
apache	groovy	2.1.0:rc3
apache	groovy	2.1.1
apache	groovy	2.1.2
apache	groovy	2.1.3
apache	groovy	2.1.4
apache	groovy	2.1.5
apache	groovy	2.1.6
apache	groovy	2.1.7
apache	groovy	2.1.8
apache	groovy	2.1.9
apache	groovy	2.2.0
apache	groovy	2.2.0:beta_1
apache	groovy	2.2.0:beta_2
apache	groovy	2.2.0:rc1
apache	groovy	2.2.0:rc2
apache	groovy	2.2.0:rc3
apache	groovy	2.2.1
apache	groovy	2.2.2
apache	groovy	2.3.0
apache	groovy	2.3.0:beta_1
apache	groovy	2.3.0:beta_2
apache	groovy	2.3.0:rc1
apache	groovy	2.3.0:rc2
apache	groovy	2.3.0:rc3
apache	groovy	2.3.1
apache	groovy	2.3.2
apache	groovy	2.3.3
apache	groovy	2.3.4
apache	groovy	2.3.5
apache	groovy	2.3.6
apache	groovy	2.3.7
apache	groovy	2.3.8
apache	groovy	2.3.9
apache	groovy	2.3.10
apache	groovy	2.3.11
apache	groovy	2.4.0
apache	groovy	2.4.0:beta_1
apache	groovy	2.4.0:beta_2
apache	groovy	2.4.0:beta_3
apache	groovy	2.4.0:beta_4
apache	groovy	2.4.0:rc1
apache	groovy	2.4.0:rc2
apache	groovy	2.4.1
apache	groovy	2.4.2
apache	groovy	2.4.3
oracle	health_sciences_clinical_development_center	3.1.1
oracle	health_sciences_clinical_development_center	3.1.2
oracle	retail_order_broker_cloud_service	4.1
oracle	retail_order_broker_cloud_service	5.1
oracle	retail_order_broker_cloud_service	5.2
oracle	retail_order_broker_cloud_service	15.0
oracle	retail_service_backbone	13.0
oracle	retail_service_backbone	13.1
oracle	retail_service_backbone	13.2
oracle	retail_service_backbone	14.0
oracle	retail_service_backbone	14.1
oracle	retail_service_backbone	15.0
oracle	retail_store_inventory_management	13.2
oracle	retail_store_inventory_management	14.0
oracle	retail_store_inventory_management	14.1
oracle	webcenter_sites	11.1.1.8.0
oracle	webcenter_sites	12.2.1

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

groovy

bullseye	2.4.21-1 fixed
bookworm	2.4.21-8 fixed
sid	2.4.21-10 fixed
trixie	2.4.21-10 fixed

Ubuntu Releases

Ubuntu Product

Codename

groovy

jammy	not-affected
impish	not-affected
hirsute	not-affected
groovy	not-affected
focal	not-affected
eoan	not-affected
disco	not-affected
cosmic	not-affected
bionic	not-affected
artful	ignored
zesty	ignored
yakkety	ignored
xenial	ignored
wily	ignored
vivid	ignored
trusty	dne
precise	ignored

groovy2

jammy	dne
impish	dne
hirsute	dne
groovy	dne
focal	dne
eoan	dne
disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	not-affected
wily	ignored
vivid	ignored
trusty	dne
precise	dne