[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5OkifdPhjBZY3yVNoFPTT95eQagygqucOv38n7Z3Mqs":3,"g5a-risk:CVE-2015-1486":124},{"success":4,"data":5,"meta":122},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":70,"weaknesses":71,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":113,"notableEvents":114},"CVE-2015-1486","What is CVE-2015-1486?","The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action that triggers a new administrative session.","The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted...","2015-08-01T01:59:03.537","2026-06-17T00:22:30.783",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.64487,[34,34,34,34,34,34,34],"High",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"symantec","endpoint_protection_manager","12.1.0","cpe:2.3:a:symantec:endpoint_protection_manager:12.1.0:*:*:*:*:*:*:*",1,[45,49,53,58,62,64,66,68],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F76074","Securityfocus",[],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1033165","Securitytracker",[],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fwww.symantec.com\u002Fsecurity_response\u002Fsecurityupdates\u002Fdetail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00","Symantec",[57],"Vendor Advisory",{"url":59,"source":60,"tags":61},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F37812\u002F","Exploit-db",[],{"url":46,"source":47,"tags":63},[],{"url":50,"source":51,"tags":65},[],{"url":54,"source":55,"tags":67},[57],{"url":59,"source":60,"tags":69},[],8,[72],{"id":73,"name":74,"description":75,"extendedDescription":27,"status":76,"abstraction":77,"structure":78},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2015-1486? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2015-1486, a high severity cyber security vulnerability from 2015. High exploit probability (64.5%). The management console in ...","CVE-2015-1486, CVE-2015-1486 vulnerability, CVE-2015-1486 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, symantec security, endpoint_protection_manager vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2015-1486",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2015-1486","Cybersecurity","CVE-2015-1486, CVE-2015-1486 vulnerability, CVE-2015-1486 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":28,"Negate":28,"Nodes":107},[108],{"Operator":109,"Negate":32,"CPEMatch":110},"OR",[111],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":112,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"590E3332-512F-44D9-A67C-6F87F6C09D17",[],[115],{"id":116,"eventType":117,"eventTime":118,"details":119,"label":120,"color":121},"2477edae-7605-41ba-b674-9180dc12b940","LOW_EPSS_DELTA","2026-06-16T04:06:38.853589+00:00","Daily EPSS score decreased by 0.140 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":123,"version":22},1793205728190,{"score":125,"band":126,"action":127,"scoredAt":128},56,"Medium","Plan remediation","2026-07-01T10:19:32.90741+00:00"]