# What is CVE-2015-2808?

> CVE-2015-2808 is a medium-severity flaw (CVSS 5.0) in Communications Application Session Controller from Oracle, published on 1 April 2015. It is not on the list of flaws known to be exploited today. The latest forecast puts its chance of use in the next 30 days at 74%. If you run an affected version, plan in the vendor’s fix.

Canonical page: https://www.precursorintelligence.com/what-is/cve-2015-2808

## At a glance

- **Verdict:** Fix this soon. Not confirmed as exploited yet, but serious or likely enough that it should not wait for a quiet month.
- **Precursor Intelligence risk score:** 55 out of 100 (Medium); action: Plan remediation. Kept up to date as the evidence changes.
- **Severity:** Medium (CVSS 5.0 out of 10)
- **Known to be exploited:** No, not on the list of flaws known to be exploited today
- **Chance of use in the next 30 days:** 74% (latest exploit-likelihood forecast)
- **Published:** 1 April 2015
- **Record last updated:** 12 April 2025
- **Main product:** Communications Application Session Controller from Oracle
- **Affected products:** 99

## What is CVE-2015-2808? In plain terms

It can be attacked from anywhere on the internet without logging in. If it works, the attacker can read some data.

### The official description

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.

### What kind of flaw is it?

- CWE-327: Use of a Broken or Risky Cryptographic Algorithm

### How an attack on it works

- Where an attacker can be: Anywhere on the internet
- How hard it is to pull off: Easy: no special conditions
- Login needed first: No login needed
- What an attacker gets: Can read some data

Severity vector: `AV:N/AC:L/Au:N/C:P/I:N/A:N`

## Is CVE-2015-2808 being exploited? Not that we know of

It is not on the list of flaws known to be exploited today. The latest forecast puts the chance of it being used in the next 30 days at 74%. That can change at any time, which is why we keep watching.

Exploit likelihood over the last 7 days: 74%, 74%, 74%, 74%, 74%, 74%, 74%.

### Timeline

- 1 April 2015: Published
- 12 April 2025: Record last updated
- 2 May 2025: Exploit likelihood fell
- 11 June 2025: Exploit likelihood jumped

### How Precursor Intelligence ranks it

CVE-2015-2808 scores **55 out of 100 (Medium)**, with the action "Plan remediation".

Every published flaw gets a risk score from 0 to 100, kept up to date as the evidence changes. Four things go into the score, from the one that counts most to the ones that count less:

- Evidence it is being exploited: biggest factor
- How severe it is: strong factor
- How widely exposed it is: smaller factor
- Threat activity around it: smaller factor

85 and above is Critical. Anything confirmed as exploited is always marked for an emergency patch, whatever its score. When this flaw matches software you track, it lands in your list with its score and the reasons behind it.

## Who is affected by CVE-2015-2808?

The published record lists 99 products. Versions are as published: "before 9.9.2" means every version up to, but not including, 9.9.2.

- [Communications Application Session Controller](https://www.precursorintelligence.com/product/oracle/communications_application_session_controller) by [Oracle](https://www.precursorintelligence.com/vendors/oracle) (Application): 3.0.0 to 3.9.0
- [Enterprise Linux Eus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_eus) by [Red Hat](https://www.precursorintelligence.com/vendors/redhat) (Operating system): 6.6, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7
- [Cognos Metrics Manager](https://www.precursorintelligence.com/product/ibm/cognos_metrics_manager) by [IBM](https://www.precursorintelligence.com/vendors/ibm) (Application): 10.1, 10.1.1, 10.2, 10.2.1, 10.2.2
- [Enterprise Linux Server Aus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server_aus) by [Red Hat](https://www.precursorintelligence.com/vendors/redhat) (Operating system): 6.6, 7.3, 7.4, 7.6, 7.7
- [HTTP Server](https://www.precursorintelligence.com/product/oracle/http_server) by [Oracle](https://www.precursorintelligence.com/vendors/oracle) (Application): 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0
- [Linux Enterprise Server](https://www.precursorintelligence.com/product/suse/linux_enterprise_server) by [Suse](https://www.precursorintelligence.com/vendors/suse) (Operating system): 10-sp4, 11-sp1, 11-sp2, 11-sp3, 12
- [Smc2.0](https://www.precursorintelligence.com/product/huawei/smc2.0) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Application): v100r002c01, v100r002c02, v100r002c03, v100r002c04
- [Enterprise Linux Desktop](https://www.precursorintelligence.com/product/redhat/enterprise_linux_desktop) by [Red Hat](https://www.precursorintelligence.com/vendors/redhat) (Operating system): 5.0, 6.0, 7.0
- [Enterprise Linux Server](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server) by [Red Hat](https://www.precursorintelligence.com/vendors/redhat) (Operating system): 5.0, 6.0, 7.0
- [Enterprise Linux Server Tus](https://www.precursorintelligence.com/product/redhat/enterprise_linux_server_tus) by [Red Hat](https://www.precursorintelligence.com/vendors/redhat) (Operating system): 7.3, 7.6, 7.7
- [Enterprise Linux Workstation](https://www.precursorintelligence.com/product/redhat/enterprise_linux_workstation) by [Red Hat](https://www.precursorintelligence.com/vendors/redhat) (Operating system): 5.0, 6.0, 7.0
- [Linux Enterprise Desktop](https://www.precursorintelligence.com/product/suse/linux_enterprise_desktop) by [Suse](https://www.precursorintelligence.com/vendors/suse) (Operating system): 11-sp3, 11-sp4, 12
- [Ubuntu Linux](https://www.precursorintelligence.com/product/canonical/ubuntu_linux) by [Canonical](https://www.precursorintelligence.com/vendors/canonical) (Operating system): 12.04, 14.04, 15.04
- [Debian Linux](https://www.precursorintelligence.com/product/debian/debian_linux) by [Debian](https://www.precursorintelligence.com/vendors/debian) (Operating system): 7.0, 8.0
- [Enterprise Linux](https://www.precursorintelligence.com/product/redhat/enterprise_linux) by [Red Hat](https://www.precursorintelligence.com/vendors/redhat) (Operating system): 5.0, 6.0
- [Integrated Lights Out Manager Firmware](https://www.precursorintelligence.com/product/oracle/integrated_lights_out_manager_firmware) by [Oracle](https://www.precursorintelligence.com/vendors/oracle) (Operating system): 3.0.0 to 3.2.11, 4.0.0 to 4.0.4
- [Linux Enterprise Debuginfo](https://www.precursorintelligence.com/product/suse/linux_enterprise_debuginfo) by [Suse](https://www.precursorintelligence.com/vendors/suse) (Application): 11-sp3, 11-sp4
- [Linux Enterprise Software Development Kit](https://www.precursorintelligence.com/product/suse/linux_enterprise_software_development_kit) by [Suse](https://www.precursorintelligence.com/vendors/suse) (Operating system): 11-sp3, 12
- [Opensuse](https://www.precursorintelligence.com/product/opensuse/opensuse) by [Opensuse](https://www.precursorintelligence.com/vendors/opensuse) (Operating system): 13.1, 13.2
- [Policy Center](https://www.precursorintelligence.com/product/huawei/policy_center) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Application): v100r003c00, v100r003c10
- [Satellite](https://www.precursorintelligence.com/product/redhat/satellite) by [Red Hat](https://www.precursorintelligence.com/vendors/redhat) (Application): 5.6, 5.7
- [9700](https://www.precursorintelligence.com/product/huawei/9700) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [9700 Firmware](https://www.precursorintelligence.com/product/huawei/9700_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Communications Policy Management](https://www.precursorintelligence.com/product/oracle/communications_policy_management) by [Oracle](https://www.precursorintelligence.com/vendors/oracle) (Application): before 9.9.2
- [E6000](https://www.precursorintelligence.com/product/huawei/e6000) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [E6000 Firmware](https://www.precursorintelligence.com/product/huawei/e6000_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [E9000](https://www.precursorintelligence.com/product/huawei/e9000) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [E9000 Firmware](https://www.precursorintelligence.com/product/huawei/e9000_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Manager](https://www.precursorintelligence.com/product/suse/manager) by [Suse](https://www.precursorintelligence.com/vendors/suse) (Application): 1.7
- [Oceanstor 18500](https://www.precursorintelligence.com/product/huawei/oceanstor_18500) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [Oceanstor 18500 Firmware](https://www.precursorintelligence.com/product/huawei/oceanstor_18500_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Oceanstor 18800](https://www.precursorintelligence.com/product/huawei/oceanstor_18800) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [Oceanstor 18800 Firmware](https://www.precursorintelligence.com/product/huawei/oceanstor_18800_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Oceanstor 18800f](https://www.precursorintelligence.com/product/huawei/oceanstor_18800f) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [Oceanstor 18800f Firmware](https://www.precursorintelligence.com/product/huawei/oceanstor_18800f_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Oceanstor 9000](https://www.precursorintelligence.com/product/huawei/oceanstor_9000) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [Oceanstor 9000 Firmware](https://www.precursorintelligence.com/product/huawei/oceanstor_9000_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Oceanstor Cse](https://www.precursorintelligence.com/product/huawei/oceanstor_cse) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [Oceanstor Cse Firmware](https://www.precursorintelligence.com/product/huawei/oceanstor_cse_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Oceanstor Hvs85t](https://www.precursorintelligence.com/product/huawei/oceanstor_hvs85t) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [Oceanstor Hvs85t Firmware](https://www.precursorintelligence.com/product/huawei/oceanstor_hvs85t_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Oceanstor Replicationdirector](https://www.precursorintelligence.com/product/huawei/oceanstor_replicationdirector) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Application): v100r003c00
- [Oceanstor S2600t](https://www.precursorintelligence.com/product/huawei/oceanstor_s2600t) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [Oceanstor S2600t Firmware](https://www.precursorintelligence.com/product/huawei/oceanstor_s2600t_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Oceanstor S5500t](https://www.precursorintelligence.com/product/huawei/oceanstor_s5500t) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [Oceanstor S5500t Firmware](https://www.precursorintelligence.com/product/huawei/oceanstor_s5500t_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Oceanstor S5600t](https://www.precursorintelligence.com/product/huawei/oceanstor_s5600t) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [Oceanstor S5600t Firmware](https://www.precursorintelligence.com/product/huawei/oceanstor_s5600t_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Oceanstor S5800t](https://www.precursorintelligence.com/product/huawei/oceanstor_s5800t) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [Oceanstor S5800t Firmware](https://www.precursorintelligence.com/product/huawei/oceanstor_s5800t_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Oceanstor S6800t](https://www.precursorintelligence.com/product/huawei/oceanstor_s6800t) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [Oceanstor S6800t Firmware](https://www.precursorintelligence.com/product/huawei/oceanstor_s6800t_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Oceanstor Vis6600t](https://www.precursorintelligence.com/product/huawei/oceanstor_vis6600t) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [Oceanstor Vis6600t Firmware](https://www.precursorintelligence.com/product/huawei/oceanstor_vis6600t_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Quidway S9300](https://www.precursorintelligence.com/product/huawei/quidway_s9300) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [Quidway S9300 Firmware](https://www.precursorintelligence.com/product/huawei/quidway_s9300_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S12700](https://www.precursorintelligence.com/product/huawei/s12700) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S12700 Firmware](https://www.precursorintelligence.com/product/huawei/s12700_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S2700](https://www.precursorintelligence.com/product/huawei/s2700) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S2700 Firmware](https://www.precursorintelligence.com/product/huawei/s2700_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S2750](https://www.precursorintelligence.com/product/huawei/s2750) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S2750 Firmware](https://www.precursorintelligence.com/product/huawei/s2750_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S3700](https://www.precursorintelligence.com/product/huawei/s3700) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S3700 Firmware](https://www.precursorintelligence.com/product/huawei/s3700_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S5700ei](https://www.precursorintelligence.com/product/huawei/s5700ei) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S5700ei Firmware](https://www.precursorintelligence.com/product/huawei/s5700ei_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S5700hi](https://www.precursorintelligence.com/product/huawei/s5700hi) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S5700hi Firmware](https://www.precursorintelligence.com/product/huawei/s5700hi_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S5700li](https://www.precursorintelligence.com/product/huawei/s5700li) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S5700li Firmware](https://www.precursorintelligence.com/product/huawei/s5700li_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S5700s-Li](https://www.precursorintelligence.com/product/huawei/s5700s-li) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S5700s-Li Firmware](https://www.precursorintelligence.com/product/huawei/s5700s-li_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S5700si](https://www.precursorintelligence.com/product/huawei/s5700si) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S5700si Firmware](https://www.precursorintelligence.com/product/huawei/s5700si_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S5710ei](https://www.precursorintelligence.com/product/huawei/s5710ei) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S5710ei Firmware](https://www.precursorintelligence.com/product/huawei/s5710ei_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S5710hi](https://www.precursorintelligence.com/product/huawei/s5710hi) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S5710hi Firmware](https://www.precursorintelligence.com/product/huawei/s5710hi_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S5720ei](https://www.precursorintelligence.com/product/huawei/s5720ei) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S5720ei Firmware](https://www.precursorintelligence.com/product/huawei/s5720ei_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S5720hi](https://www.precursorintelligence.com/product/huawei/s5720hi) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S5720hi Firmware](https://www.precursorintelligence.com/product/huawei/s5720hi_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S6700](https://www.precursorintelligence.com/product/huawei/s6700) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S6700 Firmware](https://www.precursorintelligence.com/product/huawei/s6700_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [S7700](https://www.precursorintelligence.com/product/huawei/s7700) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [S7700 Firmware](https://www.precursorintelligence.com/product/huawei/s7700_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Sparc Enterprise M3000](https://www.precursorintelligence.com/product/fujitsu/sparc_enterprise_m3000) by [Fujitsu](https://www.precursorintelligence.com/vendors/fujitsu) (Hardware): version not specified
- [Sparc Enterprise M3000 Firmware](https://www.precursorintelligence.com/product/fujitsu/sparc_enterprise_m3000_firmware) by [Fujitsu](https://www.precursorintelligence.com/vendors/fujitsu) (Operating system): xcp to before xcp_1121
- [Sparc Enterprise M4000](https://www.precursorintelligence.com/product/fujitsu/sparc_enterprise_m4000) by [Fujitsu](https://www.precursorintelligence.com/vendors/fujitsu) (Hardware): version not specified
- [Sparc Enterprise M4000 Firmware](https://www.precursorintelligence.com/product/fujitsu/sparc_enterprise_m4000_firmware) by [Fujitsu](https://www.precursorintelligence.com/vendors/fujitsu) (Operating system): xcp to before xcp_1121
- [Sparc Enterprise M5000](https://www.precursorintelligence.com/product/fujitsu/sparc_enterprise_m5000) by [Fujitsu](https://www.precursorintelligence.com/vendors/fujitsu) (Hardware): version not specified
- [Sparc Enterprise M5000 Firmware](https://www.precursorintelligence.com/product/fujitsu/sparc_enterprise_m5000_firmware) by [Fujitsu](https://www.precursorintelligence.com/vendors/fujitsu) (Operating system): xcp to before xcp_1121
- [Sparc Enterprise M8000](https://www.precursorintelligence.com/product/fujitsu/sparc_enterprise_m8000) by [Fujitsu](https://www.precursorintelligence.com/vendors/fujitsu) (Hardware): version not specified
- [Sparc Enterprise M8000 Firmware](https://www.precursorintelligence.com/product/fujitsu/sparc_enterprise_m8000_firmware) by [Fujitsu](https://www.precursorintelligence.com/vendors/fujitsu) (Operating system): xcp to before xcp_1121
- [Sparc Enterprise M9000](https://www.precursorintelligence.com/product/fujitsu/sparc_enterprise_m9000) by [Fujitsu](https://www.precursorintelligence.com/vendors/fujitsu) (Hardware): version not specified
- [Sparc Enterprise M9000 Firmware](https://www.precursorintelligence.com/product/fujitsu/sparc_enterprise_m9000_firmware) by [Fujitsu](https://www.precursorintelligence.com/vendors/fujitsu) (Operating system): xcp to before xcp_1121
- [Te60](https://www.precursorintelligence.com/product/huawei/te60) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified
- [Te60 Firmware](https://www.precursorintelligence.com/product/huawei/te60_firmware) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Operating system): version not specified
- [Ultravr](https://www.precursorintelligence.com/product/huawei/ultravr) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Application): v100r003c00

## How do I fix CVE-2015-2808?

1. **Check whether you run it.** Compare your versions with the affected products above. Not sure what you run? Precursor Intelligence can work it out from your public website, or you can pick it from a list.
2. **Apply the vendor’s fix.** Install the latest update from the vendor. The references list where the vendor has published details.
3. **If you can’t patch today.** Follow any mitigation the vendor publishes, and limit who can reach the affected system from the internet until the update is in.
4. **Keep an eye on it.** Track the product and we tell you as soon as we spot this flaw on the list of exploited flaws, or a jump in its exploit likelihood.

### References

- [h20564.www2.hpe.com](http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034) (Third-party advisory)
- [kb.juniper.net](http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705) (Third-party advisory)
- [kb.juniper.net](http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727) (Third-party advisory)
- [lists.opensuse.org](http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html) (Mailing list, Third-party advisory)
- [lists.opensuse.org](http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html) (Mailing list, Third-party advisory)
- [lists.opensuse.org](http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html) (Mailing list, Third-party advisory)
- [lists.opensuse.org](http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html) (Mailing list, Third-party advisory)
- [lists.opensuse.org](http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html) (Mailing list, Third-party advisory)
- [lists.opensuse.org](http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html) (Mailing list, Third-party advisory)
- [lists.opensuse.org](http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html) (Mailing list, Third-party advisory)
- [lists.opensuse.org](http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html) (Mailing list, Third-party advisory)
- [lists.opensuse.org](http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html) (Mailing list, Third-party advisory)
- [lists.opensuse.org](http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html) (Mailing list, Third-party advisory)
- [lists.opensuse.org](http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html) (Mailing list, Third-party advisory)
- [lists.opensuse.org](http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html) (Mailing list, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=143456209711959&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=143629696317098&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=143741441012338&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=143817021313142&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=143817899717054&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=143818140118771&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=144043644216842&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=144059660127919&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=144059703728085&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=144060576831314&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=144060606031437&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=144069189622016&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=144102017024820&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=144104533800819&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=144104565600964&w=2) (Issue tracking, Third-party advisory)
- [marc.info](http://marc.info/?l=bugtraq&m=144493176821532&w=2) (Issue tracking, Third-party advisory)
- [rhn.redhat.com](http://rhn.redhat.com/errata/RHSA-2015-1006.html) (Third-party advisory)
- [rhn.redhat.com](http://rhn.redhat.com/errata/RHSA-2015-1007.html) (Third-party advisory)
- [rhn.redhat.com](http://rhn.redhat.com/errata/RHSA-2015-1020.html) (Third-party advisory)
- [rhn.redhat.com](http://rhn.redhat.com/errata/RHSA-2015-1021.html) (Third-party advisory)
- [rhn.redhat.com](http://rhn.redhat.com/errata/RHSA-2015-1091.html) (Third-party advisory)
- [rhn.redhat.com](http://rhn.redhat.com/errata/RHSA-2015-1228.html) (Third-party advisory)
- [rhn.redhat.com](http://rhn.redhat.com/errata/RHSA-2015-1229.html) (Third-party advisory)
- [rhn.redhat.com](http://rhn.redhat.com/errata/RHSA-2015-1230.html) (Third-party advisory)
- [rhn.redhat.com](http://rhn.redhat.com/errata/RHSA-2015-1241.html) (Third-party advisory)
- [rhn.redhat.com](http://rhn.redhat.com/errata/RHSA-2015-1242.html) (Third-party advisory)
- [rhn.redhat.com](http://rhn.redhat.com/errata/RHSA-2015-1243.html) (Third-party advisory)
- [rhn.redhat.com](http://rhn.redhat.com/errata/RHSA-2015-1526.html) (Third-party advisory)
- [www-01.ibm.com](http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888) (Third-party advisory)
- [www-01.ibm.com](http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892) (Third-party advisory)

## Questions

### What is CVE-2015-2808?

CVE-2015-2808 is a medium-severity flaw in Communications Application Session Controller from Oracle, published on 1 April 2015. It can be attacked from anywhere on the internet without logging in. If it works, the attacker can read some data.

### How serious is CVE-2015-2808?

It scores 5.0 out of 10 on the CVSS severity scale, which is medium. Our risk score for CVE-2015-2808 is 55 out of 100, which is Medium. Its action is "Plan remediation". Not confirmed as exploited yet, but serious or likely enough that it should not wait for a quiet month.

### Is CVE-2015-2808 being exploited?

It is not on the list of flaws known to be exploited today. The latest forecast puts the chance of it being used in the next 30 days at 74%. That can change at any time, which is why we keep watching.

### Which versions does CVE-2015-2808 affect?

For Communications Application Session Controller from Oracle: 3.0.0 to 3.9.0. The record lists 99 products in all, each with its versions, under "Who is affected" on this page.

### How do I fix CVE-2015-2808?

Install the update the vendor names in its advisory. If you can't patch today, follow the vendor's mitigation and limit who can reach the affected system from the internet.

## Does CVE-2015-2808 affect you?

Precursor Intelligence keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.precursorintelligence.com/register
Book a demo: https://www.precursorintelligence.com/contact