Search for vulnerabilities
Vulnerability details: VCID-2v75-59r8-vyh3
Vulnerability ID VCID-2v75-59r8-vyh3
Aliases CVE-2015-6835
Summary
Status Published
Exploitability 2.0
Weighted Severity 0.2
Risk 0.4
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-416 Use After Free
System Score Found at
epss 0.23872 https://api.first.org/data/v1/epss?cve=CVE-2015-6835
epss 0.23872 https://api.first.org/data/v1/epss?cve=CVE-2015-6835
epss 0.23872 https://api.first.org/data/v1/epss?cve=CVE-2015-6835
epss 0.23872 https://api.first.org/data/v1/epss?cve=CVE-2015-6835
epss 0.24566 https://api.first.org/data/v1/epss?cve=CVE-2015-6835
epss 0.24566 https://api.first.org/data/v1/epss?cve=CVE-2015-6835
epss 0.24566 https://api.first.org/data/v1/epss?cve=CVE-2015-6835
epss 0.24566 https://api.first.org/data/v1/epss?cve=CVE-2015-6835
epss 0.24566 https://api.first.org/data/v1/epss?cve=CVE-2015-6835
epss 0.24566 https://api.first.org/data/v1/epss?cve=CVE-2015-6835
epss 0.24566 https://api.first.org/data/v1/epss?cve=CVE-2015-6835
epss 0.24566 https://api.first.org/data/v1/epss?cve=CVE-2015-6835
epss 0.24566 https://api.first.org/data/v1/epss?cve=CVE-2015-6835
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6835.json
https://api.first.org/data/v1/epss?cve=CVE-2015-6835
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6834
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6835
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6836
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6837
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6838
1260647 https://bugzilla.redhat.com/show_bug.cgi?id=1260647
CVE-2015-6835;OSVDB-126962 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/dos/38123.txt
RHSA-2016:0457 https://access.redhat.com/errata/RHSA-2016:0457
USN-2758-1 https://usn.ubuntu.com/2758-1/
Data source Exploit-DB
Date added Sept. 9, 2015
Description PHP Session Deserializer - Use-After-Free
Ransomware campaign use Known
Source publication date Sept. 9, 2015
Exploit type dos
Platform php
Source update date Sept. 9, 2015
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.95826
EPSS Score 0.23872
Published At Aug. 1, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:41:38.645659+00:00 Ubuntu USN Importer Import https://usn.ubuntu.com/2758-1/ 37.0.0