Search for vulnerabilities
Vulnerability details: VCID-xmuc-c5b6-a3ab
Vulnerability ID VCID-xmuc-c5b6-a3ab
Aliases CVE-2015-7214
Summary Security researcher Tsubasa Iinuma reported a mechanism to violate same-origin policy to content using data: and view-source: URIs to confuse protections and bypass restrictions. This resulted in the ability to read data from cross-site URLs and local files. In general this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled, but is potentially a risk in browser or browser-like contexts.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.15477 https://api.first.org/data/v1/epss?cve=CVE-2015-7214
epss 0.15477 https://api.first.org/data/v1/epss?cve=CVE-2015-7214
epss 0.15477 https://api.first.org/data/v1/epss?cve=CVE-2015-7214
epss 0.15477 https://api.first.org/data/v1/epss?cve=CVE-2015-7214
epss 0.15477 https://api.first.org/data/v1/epss?cve=CVE-2015-7214
epss 0.15477 https://api.first.org/data/v1/epss?cve=CVE-2015-7214
epss 0.15477 https://api.first.org/data/v1/epss?cve=CVE-2015-7214
epss 0.15477 https://api.first.org/data/v1/epss?cve=CVE-2015-7214
epss 0.15477 https://api.first.org/data/v1/epss?cve=CVE-2015-7214
epss 0.15477 https://api.first.org/data/v1/epss?cve=CVE-2015-7214
epss 0.15477 https://api.first.org/data/v1/epss?cve=CVE-2015-7214
epss 0.15477 https://api.first.org/data/v1/epss?cve=CVE-2015-7214
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2015-149
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7214.json
https://api.first.org/data/v1/epss?cve=CVE-2015-7214
1291600 https://bugzilla.redhat.com/show_bug.cgi?id=1291600
CVE-2015-7214 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7214
mfsa2015-149 https://www.mozilla.org/en-US/security/advisories/mfsa2015-149
RHSA-2015:2657 https://access.redhat.com/errata/RHSA-2015:2657
RHSA-2016:0001 https://access.redhat.com/errata/RHSA-2016:0001
USN-2833-1 https://usn.ubuntu.com/2833-1/
USN-2859-1 https://usn.ubuntu.com/2859-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.94363
EPSS Score 0.15477
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:50.913553+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2015/mfsa2015-149.md 37.0.0