[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2FNII2E16ZME9DjZXrvFeIMJ06m5LMF_Cc3IsX1U9c4":3,"g5a-risk:CVE-2015-4165":133},{"success":4,"data":5,"meta":131},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":48,"references":49,"referencesCount":89,"weaknesses":90,"weaknessesCount":48,"isActivelyExploited":94,"cisaInfo":15,"otxData":15,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":129,"notableEvents":130},"CVE-2015-4165","What is CVE-2015-4165?","The snapshot API in Elasticsearch before 1.6.0 when another application exists on the system that can read Lucene files and execute code from them, is accessible by the attacker, and the Java VM on which Elasticsearch is running can write to a location that the other application can read and execute from, allows remote authenticated users to write to and create arbitrary snapshot metadata files, and potentially execute arbitrary code.","The snapshot API in Elasticsearch before 1.6.0 when another application exists on the system that can read Lucene files and execute code from them, is access...","2017-08-09T16:29:00.253","2025-04-20T01:37:25.86",7.5,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","LOW","NONE","UNCHANGED",1.6,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":34,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":34,"Authentication":35,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","MEDIUM","SINGLE","PARTIAL",6,6.8,6.4,0.0445,[40,40,40,40,40,40,40],"High",[44],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"elasticsearch","1.5.2","cpe:2.3:a:elasticsearch:elasticsearch:1.5.2:*:*:*:*:*:*:*",1,[50,56,60,63,67,72,77,79,81,83,85,87],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F132234\u002FElasticsearch-1.5.2-File-Creation.html","Packetstormsecurity",[54,55],"Third Party Advisory","VDB Entry",{"url":57,"source":58,"tags":59},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F535727\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":61,"source":58,"tags":62},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F536855\u002F100\u002F0\u002Fthreaded",[],{"url":64,"source":58,"tags":65},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F75113",[66,54,55],"Mitigation",{"url":68,"source":69,"tags":70},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1230761","Red Hat",[71,54],"Issue Tracking",{"url":73,"source":74,"tags":75},"https:\u002F\u002Fwww.elastic.co\u002Fcommunity\u002Fsecurity\u002F","Elastic",[76],"Vendor Advisory",{"url":51,"source":52,"tags":78},[54,55],{"url":57,"source":58,"tags":80},[],{"url":61,"source":58,"tags":82},[],{"url":64,"source":58,"tags":84},[66,54,55],{"url":68,"source":69,"tags":86},[71,54],{"url":73,"source":74,"tags":88},[76],12,[91],{"id":92,"name":92,"description":93},"Unknown","CWE-264",false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2015-4165? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-4165, a high severity cyber security vulnerability from 2017. The snapshot API in Elasticsearch before 1.6.0 when another ...","CVE-2015-4165, CVE-2015-4165 vulnerability, CVE-2015-4165 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, elasticsearch security, elasticsearch vulnerability","\u002Fwhat-is\u002Fcve-2015-4165",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-4165","Cybersecurity","CVE-2015-4165, CVE-2015-4165 vulnerability, CVE-2015-4165 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122],{"Operator":15,"Negate":15,"Nodes":123},[124],{"Operator":125,"Negate":15,"CPEMatch":126},"OR",[127],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":128,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F4CB88EE-B3C9-4719-9F9A-3D6DEED26E46",[],[],{"lastModified":11,"cacheTime":132,"version":32},1792260804326,{"score":134,"band":135,"action":136,"scoredAt":137},48,"Medium","Plan remediation","2026-10-17T09:11:09.740471+00:00"]