[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpCBkVxTKi_sOap4Ios0LxORpCw2jNuBdXdAYGXBuC9U":3,"g5a-risk:CVE-2015-3457":129},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":33,"epssPercentile":27,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":44,"references":45,"referencesCount":72,"weaknesses":73,"weaknessesCount":81,"isActivelyExploited":31,"cisaInfo":27,"otxData":27,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":118,"notableEvents":119},"CVE-2015-3457","What is CVE-2015-3457?","Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote attackers to bypass authentication via the forwarded parameter.","2015-04-29T22:59:03.253","2026-06-17T00:25:57.76",5,"AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":32},[],[],[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":28,"ExploitabilityScore":29,"ImpactScore":30,"ACInsufInfo":31,"ObtainAllPrivilege":31,"ObtainUserPrivilege":31,"ObtainOtherPrivilege":31,"UserInteractionRequired":31},"nvd@nist.gov","Primary",{"Version":21,"VectorString":12,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":26,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"MEDIUM",10,2.9,false,[],0.25218,[33,33,33,33,33,33,33],"Medium",[37,41],{"vendor":38,"product":38,"version":39,"criteria":40,"vulnerable":4},"magento","1.9.1.0","cpe:2.3:a:magento:magento:1.9.1.0:*:*:*:community:*:*:*",{"vendor":38,"product":38,"version":42,"criteria":43,"vulnerable":4},"1.14.1.0","cpe:2.3:a:magento:magento:1.14.1.0:*:*:*:enterprise:*:*:*",2,[46,50,56,60,64,66,68,70],{"url":47,"source":48,"tags":49},"http:\u002F\u002Fblog.checkpoint.com\u002F2015\u002F04\u002F20\u002Fanalyzing-magento-vulnerability\u002F","Checkpoint",[],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fmagento.com\u002Fblog\u002Ftechnical\u002Fcritical-security-advisory-remote-code-execution-rce-vulnerability","Magento",[54,55],"Patch","Vendor Advisory",{"url":57,"source":58,"tags":59},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F74420","Securityfocus",[],{"url":61,"source":62,"tags":63},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1032230","Securitytracker",[],{"url":47,"source":48,"tags":65},[],{"url":51,"source":52,"tags":67},[54,55],{"url":57,"source":58,"tags":69},[],{"url":61,"source":62,"tags":71},[],8,[74],{"id":75,"name":76,"description":77,"extendedDescription":26,"status":78,"abstraction":79,"structure":80},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",1,[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2015-3457? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2015-3457, a medium severity cyber security vulnerability from 2015. Magento Community Edition (CE) 1.9.1.0 and Enterprise Edit...","CVE-2015-3457, CVE-2015-3457 vulnerability, CVE-2015-3457 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, magento security, magento vulnerability","\u002Fwhat-is\u002Fcve-2015-3457",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":9,"dateModified":10,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2015-3457","Cybersecurity","CVE-2015-3457, CVE-2015-3457 vulnerability, CVE-2015-3457 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109],{"Operator":27,"Negate":27,"Nodes":110},[111],{"Operator":112,"Negate":31,"CPEMatch":113},"OR",[114,116],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":115,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A6844CE7-F5A9-41CC-BAE8-C860C36F1C14",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":117,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3B9093FD-5E68-4616-BFDC-DA589FBCEDFB",[],[120],{"id":121,"eventType":122,"eventTime":123,"details":124,"label":125,"color":126},"7a752151-8e13-416e-916b-433a5f9dc0f2","HIGH_EPSS_DELTA","2026-06-16T04:06:37.727796+00:00","Daily EPSS score increased by 0.163 on 2023-12-30","EPSS Score Increased","red",{"lastModified":10,"cacheTime":128,"version":21},1793200670762,{"score":130,"band":131,"action":132,"scoredAt":133},31,"Low","Monitor","2026-07-01T10:19:26.087641+00:00"]