CVE-2015-8651

Key facts

CVSS score

8.8 (v3.1)

Severity

HIGH

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness (CWE)

CWE-190

EPSS score

67.7% (99th percentile)

In CISA KEV

Yes, added May 25, 2022

In EU EUVD

Yes (EUVD-2015-8528)

Published

December 28, 2015

NVD last modified

June 17, 2026

Status

Analyzed

Affected products

• adobe / air
• adobe / air sdk
• adobe / air sdk & compiler
• adobe / flash player
• apple / iphone os
• apple / mac os x
• google / android
• hp / insight control
• hp / insight control server provisioning
• hp / matrix operating environment
• hp / system management homepage
• hp / systems insight manager
• hp / version control repository manager
• linux / linux kernel
• microsoft / windows
• opensuse / evergreen
• opensuse / opensuse
• opensuse / opensuse
• redhat / enterprise linux desktop
• redhat / enterprise linux desktop
• redhat / enterprise linux server
• redhat / enterprise linux server
• redhat / enterprise linux workstation
• redhat / enterprise linux workstation
• suse / linux enterprise desktop
• suse / linux enterprise desktop
• suse / linux enterprise desktop
• suse / linux enterprise desktop
• suse / linux enterprise workstation extension
• suse / linux enterprise workstation extension

Certified products that may be affected

1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical

References

• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00045.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00046.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00047.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00048.html(Mailing List, Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2015-2697.html(Third Party Advisory)
• http://www.securityfocus.com/bid/79705(Broken Link, Third Party Advisory, VDB Entry)
• http://www.securitytracker.com/id/1034544(Broken Link, Third Party Advisory, VDB Entry)
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388(Third Party Advisory)
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680(Third Party Advisory)
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722(Third Party Advisory)
• https://helpx.adobe.com/security/products/flash-player/apsb16-01.html(Not Applicable, Patch, Vendor Advisory)
• https://security.gentoo.org/glsa/201601-03(Third Party Advisory)
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-8651(US Government Resource)