[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsD7e6_8H_DjuZUThfUMhbjTYEcKx1QyKMSphK8e107w":3,"g5a-risk:CVE-2015-5452":157},{"success":4,"data":5,"meta":155},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":41,"references":42,"referencesCount":91,"weaknesses":92,"weaknessesCount":101,"isActivelyExploited":102,"cisaInfo":15,"otxData":15,"relatedBlogPosts":103,"seoMetadata":104,"configurations":129,"relatedVendorCves":139,"notableEvents":140},"CVE-2015-5452","What is CVE-2015-5452?","SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost\u002Fimp\u002Fcompose.php3.","SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, ...","2015-07-08T15:59:04.003","2025-04-12T10:46:40.837",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","PARTIAL","HIGH",10,6.4,0.03416,[29,29,29,29,29,29,29],"High",[33,38],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"watchguard","xcs","9.2","cpe:2.3:a:watchguard:xcs:9.2:*:*:*:*:*:*:*",{"vendor":34,"product":35,"version":39,"criteria":40,"vulnerable":4},"10.0","cpe:2.3:a:watchguard:xcs:10.0:*:*:*:*:*:*:*",2,[43,48,51,55,59,63,68,71,75,77,79,81,83,85,87,89],{"url":44,"source":45,"tags":46},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F132498\u002FWatchguard-XCS-10.0-SQL-Injection-Command-Execution.html","Packetstormsecurity",[47],"Exploit",{"url":49,"source":45,"tags":50},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F133721\u002FWatchguard-XCS-Remote-Command-Execution.html",[47],{"url":52,"source":53,"tags":54},"http:\u002F\u002Fwww.rapid7.com\u002Fdb\u002Fmodules\u002Fexploit\u002Ffreebsd\u002Fhttp\u002Fwatchguard_cmd_exec","Rapid7",[47],{"url":56,"source":57,"tags":58},"http:\u002F\u002Fwww.security-assessment.com\u002Ffiles\u002Fdocuments\u002Fadvisory\u002FWatchguard-XCS-final.pdf","Security-assessment",[47],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F75516","Securityfocus",[],{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.watchguard.com\u002Fsupport\u002Frelease-notes\u002Fxcs\u002F10\u002Fen-US\u002FEN_Release_Notes_XCS_v10_0_Security_Hotfix\u002FEN_Release_Notes_XCS_v10_0_Security_Hotfix.pdf","Watchguard",[67],"Vendor Advisory",{"url":69,"source":65,"tags":70},"http:\u002F\u002Fwww.watchguard.com\u002Fsupport\u002Frelease-notes\u002Fxcs\u002F9\u002Fen-US\u002FEN_ReleaseNotes_XCS_9_2_Security_Hotfix\u002FEN_Release_Notes_XCS_v9_2_Security_Hotfix.pdf",[67],{"url":72,"source":73,"tags":74},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F38346\u002F","Exploit-db",[47],{"url":44,"source":45,"tags":76},[47],{"url":49,"source":45,"tags":78},[47],{"url":52,"source":53,"tags":80},[47],{"url":56,"source":57,"tags":82},[47],{"url":60,"source":61,"tags":84},[],{"url":64,"source":65,"tags":86},[67],{"url":69,"source":65,"tags":88},[67],{"url":72,"source":73,"tags":90},[47],16,[93],{"id":94,"name":95,"description":96,"extendedDescription":97,"status":98,"abstraction":99,"structure":100},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","","Stable","Base","Simple",1,false,[],{"title":105,"metaDescription":106,"keywords":107,"canonicalUrl":108,"structuredData":109},"What is CVE-2015-5452? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-5452, a high severity cyber security vulnerability from 2015. SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 b...","CVE-2015-5452, CVE-2015-5452 vulnerability, CVE-2015-5452 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, watchguard security, xcs vulnerability","\u002Fwhat-is\u002Fcve-2015-5452",{"@context":110,"@type":111,"headline":105,"description":106,"datePublished":10,"dateModified":11,"author":112,"publisher":116,"about":120,"mainEntityOfPage":124,"articleSection":127,"keywords":128},"https:\u002F\u002Fschema.org","TechArticle",{"@type":113,"name":114,"url":115},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":113,"name":114,"url":115,"logo":117},{"@type":118,"url":119},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":121,"name":6,"description":122,"additionalType":123},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":125,"@id":126},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-5452","Cybersecurity","CVE-2015-5452, CVE-2015-5452 vulnerability, CVE-2015-5452 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[130],{"Operator":15,"Negate":15,"Nodes":131},[132],{"Operator":133,"Negate":15,"CPEMatch":134},"OR",[135,137],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":136,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"14D2BCAA-CB36-4D3A-A136-0727220373D5",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":138,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"0EAF6893-3259-4E9A-A330-A541A351ACFE",[],[141,148],{"id":142,"eventType":143,"eventTime":144,"details":145,"label":146,"color":147},"935e6473-c95d-42cc-811b-57784f8ecec3","LOW_EPSS_DELTA","2025-06-11T10:11:33.873097+00:00","Daily EPSS score decreased by 0.149 on 2023-12-30","EPSS Score Decreased","green",{"id":149,"eventType":150,"eventTime":151,"details":152,"label":153,"color":154},"0350b22c-0388-47b5-b570-d1a2855b0914","HIGH_EPSS_DELTA","2025-09-17T04:10:11.415646+00:00","Daily EPSS score increased by 0.171 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":156,"version":21},1792346186322,{"score":158,"band":159,"action":160,"scoredAt":161},47,"Medium","Plan remediation","2026-10-17T07:38:55.112162+00:00"]