AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2015-2741

MEDIUM · CVSS 4.3 EPSS 1.31%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-07-06 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.3. It affects Firefox.

CVE
CVE-2015-2741
Severity
MEDIUM
CVSS
4.3
EPSS
1.31%
Firefox

Original NVD Description

Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog, which allows user-assisted man-in-the-middle attackers to bypass intended access restrictions by triggering a (1) expired certificate or (2) mismatched hostname for a domain with pinning enabled.