[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$futOoaDQ0QqSzCjR7EAehl532oIZbqAddCNbuWO5zIJ4":3,"g5a-risk:CVE-2015-1427":175},{"success":4,"data":5,"meta":173},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":60,"references":61,"referencesCount":119,"weaknesses":120,"weaknessesCount":124,"isActivelyExploited":4,"cisaInfo":125,"otxData":27,"relatedBlogPosts":126,"seoMetadata":127,"configurations":152,"relatedVendorCves":171,"notableEvents":172},"CVE-2015-1427","What is CVE-2015-1427?","The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.","The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execu...","2015-02-17T15:59:04.56","2025-10-22T01:16:08.18",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":25,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":45,"ObtainAllPrivilege":45,"ObtainUserPrivilege":45,"ObtainOtherPrivilege":45,"UserInteractionRequired":45},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":40,"IntegrityImpact":40,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":42,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,"",10,6.4,false,0.99906,[46,46,46,46,46,46,46],"Critical",[50,55],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"elastic","elasticsearch","*","cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"redhat","fuse","1.0.0","cpe:2.3:a:redhat:fuse:1.0.0:*:*:*:*:*:*:*",2,[62,68,72,78,83,86,90,94,99,101,103,105,107,109,111,113,115],{"url":63,"source":64,"tags":65},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F130368\u002FElasticsearch-1.3.7-1.4.2-Sandbox-Escape-Command-Execution.html","Packetstormsecurity",[66,67],"Third Party Advisory","VDB Entry",{"url":69,"source":64,"tags":70},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F130784\u002FElasticSearch-Unauthenticated-Remote-Code-Execution.html",[71,66,67],"Exploit",{"url":73,"source":74,"tags":75},"http:\u002F\u002Fwww.elasticsearch.com\u002Fblog\u002Felasticsearch-1-4-3-1-3-8-released\u002F","Elasticsearch",[76,77],"Patch","Vendor Advisory",{"url":79,"source":80,"tags":81},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F534689\u002F100\u002F0\u002Fthreaded","Securityfocus",[82,66,67],"Broken Link",{"url":84,"source":80,"tags":85},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F72585",[82,66,67],{"url":87,"source":88,"tags":89},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:0868","Red Hat",[66],{"url":91,"source":92,"tags":93},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F100850","Ibmcloud",[66,67],{"url":95,"source":96,"tags":97},"https:\u002F\u002Fwww.elastic.co\u002Fcommunity\u002Fsecurity\u002F","Elastic",[98,77],"Not Applicable",{"url":63,"source":64,"tags":100},[66,67],{"url":69,"source":64,"tags":102},[71,66,67],{"url":73,"source":74,"tags":104},[76,77],{"url":79,"source":80,"tags":106},[82,66,67],{"url":84,"source":80,"tags":108},[82,66,67],{"url":87,"source":88,"tags":110},[66],{"url":91,"source":92,"tags":112},[66,67],{"url":95,"source":96,"tags":114},[98,77],{"url":116,"source":117,"tags":118},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1427","CISA",[],17,[121],{"id":122,"name":122,"description":123},"Unknown","NVD-CWE-noinfo",1,{"shortDescription":42,"requiredAction":42,"vulnerabilityName":42,"dateAdded":27},[],{"title":128,"metaDescription":129,"keywords":130,"canonicalUrl":131,"structuredData":132},"What is CVE-2015-1427? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-1427, a critical severity cyber security vulnerability from 2015. High exploit probability (99.9%). The Groovy scripting e...","CVE-2015-1427, CVE-2015-1427 vulnerability, CVE-2015-1427 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, elastic security, redhat security, elasticsearch vulnerability, fuse vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2015-1427",{"@context":133,"@type":134,"headline":128,"description":129,"datePublished":10,"dateModified":11,"author":135,"publisher":139,"about":143,"mainEntityOfPage":147,"articleSection":150,"keywords":151},"https:\u002F\u002Fschema.org","TechArticle",{"@type":136,"name":137,"url":138},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":136,"name":137,"url":138,"logo":140},{"@type":141,"url":142},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":144,"name":6,"description":145,"additionalType":146},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":148,"@id":149},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-1427","Cybersecurity","CVE-2015-1427, CVE-2015-1427 vulnerability, CVE-2015-1427 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[153,165],{"Operator":27,"Negate":27,"Nodes":154},[155],{"Operator":156,"Negate":45,"CPEMatch":157},"OR",[158,161],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":159,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":160,"VersionEndIncluding":27},"DA519AE4-05D4-4C0A-81F0-95C50B51DAEA","1.3.8",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":163,"VersionEndExcluding":164,"VersionEndIncluding":27},"F148EDE6-303D-4F26-B88D-D379BC003B42","1.4.0","1.4.3",{"Operator":27,"Negate":27,"Nodes":166},[167],{"Operator":156,"Negate":45,"CPEMatch":168},[169],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":170,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0F31D7E8-D31D-4268-9ABF-3733915AA226",[],[],{"lastModified":11,"cacheTime":174,"version":38},1792247644036,{"score":176,"band":48,"action":177,"scoredAt":178},90,"Emergency patch","2026-10-17T07:36:14.692454+00:00"]