[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsD7e6_8H_DjuZUThfUMhbjTYEcKx1QyKMSphK8e107w":3,"g5a-risk:CVE-2015-5452":160},{"success":4,"data":5,"meta":158},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":46,"references":47,"referencesCount":96,"weaknesses":97,"weaknessesCount":105,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":106,"seoMetadata":107,"configurations":132,"relatedVendorCves":142,"notableEvents":143},"CVE-2015-5452","What is CVE-2015-5452?","SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost\u002Fimp\u002Fcompose.php3.","SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, ...","2015-07-08T15:59:04.003","2026-06-17T00:29:08.88",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.03416,[34,34,34,34,34,34,34],"High",[38,43],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"watchguard","xcs","9.2","cpe:2.3:a:watchguard:xcs:9.2:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"10.0","cpe:2.3:a:watchguard:xcs:10.0:*:*:*:*:*:*:*",2,[48,53,56,60,64,68,73,76,80,82,84,86,88,90,92,94],{"url":49,"source":50,"tags":51},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F132498\u002FWatchguard-XCS-10.0-SQL-Injection-Command-Execution.html","Packetstormsecurity",[52],"Exploit",{"url":54,"source":50,"tags":55},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F133721\u002FWatchguard-XCS-Remote-Command-Execution.html",[52],{"url":57,"source":58,"tags":59},"http:\u002F\u002Fwww.rapid7.com\u002Fdb\u002Fmodules\u002Fexploit\u002Ffreebsd\u002Fhttp\u002Fwatchguard_cmd_exec","Rapid7",[52],{"url":61,"source":62,"tags":63},"http:\u002F\u002Fwww.security-assessment.com\u002Ffiles\u002Fdocuments\u002Fadvisory\u002FWatchguard-XCS-final.pdf","Security-assessment",[52],{"url":65,"source":66,"tags":67},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F75516","Securityfocus",[],{"url":69,"source":70,"tags":71},"http:\u002F\u002Fwww.watchguard.com\u002Fsupport\u002Frelease-notes\u002Fxcs\u002F10\u002Fen-US\u002FEN_Release_Notes_XCS_v10_0_Security_Hotfix\u002FEN_Release_Notes_XCS_v10_0_Security_Hotfix.pdf","Watchguard",[72],"Vendor Advisory",{"url":74,"source":70,"tags":75},"http:\u002F\u002Fwww.watchguard.com\u002Fsupport\u002Frelease-notes\u002Fxcs\u002F9\u002Fen-US\u002FEN_ReleaseNotes_XCS_9_2_Security_Hotfix\u002FEN_Release_Notes_XCS_v9_2_Security_Hotfix.pdf",[72],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F38346\u002F","Exploit-db",[52],{"url":49,"source":50,"tags":81},[52],{"url":54,"source":50,"tags":83},[52],{"url":57,"source":58,"tags":85},[52],{"url":61,"source":62,"tags":87},[52],{"url":65,"source":66,"tags":89},[],{"url":69,"source":70,"tags":91},[72],{"url":74,"source":70,"tags":93},[72],{"url":77,"source":78,"tags":95},[52],16,[98],{"id":99,"name":100,"description":101,"extendedDescription":27,"status":102,"abstraction":103,"structure":104},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","Stable","Base","Simple",1,[],{"title":108,"metaDescription":109,"keywords":110,"canonicalUrl":111,"structuredData":112},"What is CVE-2015-5452? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2015-5452, a high severity cyber security vulnerability from 2015. SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 b...","CVE-2015-5452, CVE-2015-5452 vulnerability, CVE-2015-5452 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, watchguard security, xcs vulnerability","\u002Fwhat-is\u002Fcve-2015-5452",{"@context":113,"@type":114,"headline":108,"description":109,"datePublished":10,"dateModified":11,"author":115,"publisher":119,"about":123,"mainEntityOfPage":127,"articleSection":130,"keywords":131},"https:\u002F\u002Fschema.org","TechArticle",{"@type":116,"name":117,"url":118},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":116,"name":117,"url":118,"logo":120},{"@type":121,"url":122},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":124,"name":6,"description":125,"additionalType":126},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":128,"@id":129},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2015-5452","Cybersecurity","CVE-2015-5452, CVE-2015-5452 vulnerability, CVE-2015-5452 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[133],{"Operator":28,"Negate":28,"Nodes":134},[135],{"Operator":136,"Negate":32,"CPEMatch":137},"OR",[138,140],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":139,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"14D2BCAA-CB36-4D3A-A136-0727220373D5",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":141,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0EAF6893-3259-4E9A-A330-A541A351ACFE",[],[144,151],{"id":145,"eventType":146,"eventTime":147,"details":148,"label":149,"color":150},"935e6473-c95d-42cc-811b-57784f8ecec3","LOW_EPSS_DELTA","2025-06-11T10:11:33.873097+00:00","Daily EPSS score decreased by 0.149 on 2023-12-30","EPSS Score Decreased","green",{"id":152,"eventType":153,"eventTime":154,"details":155,"label":156,"color":157},"0350b22c-0388-47b5-b570-d1a2855b0914","HIGH_EPSS_DELTA","2025-09-17T04:10:11.415646+00:00","Daily EPSS score increased by 0.171 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":159,"version":22},1793221512572,{"score":161,"band":162,"action":163,"scoredAt":164},47,"Medium","Plan remediation","2026-07-01T10:19:31.284326+00:00"]