Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-zca5-m2yy-zybb
Vulnerability ID VCID-zca5-m2yy-zybb
Aliases CVE-2015-2744
Summary Security researcher Muneaki Nishimura reported an issue with Gaia's Search app which allows an attacker to inject HTML code into the System app's context via specially-crafted search links. The injection occurs when the user opens such malicious link in the browser and then re-opens the browser or opens the tab view.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2015-2744
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2015-2744
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2015-2744
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2015-2744
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2015-2744
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2015-2744
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2015-2744
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2015-2744
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2015-2744
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2015-72
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2015-2744
CVE-2015-2744 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2744
mfsa2015-72 https://www.mozilla.org/en-US/security/advisories/mfsa2015-72
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.49607
EPSS Score 0.00263
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:18:26.970334+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2015/mfsa2015-72.md 38.0.0