CVE-2015-4478

MEDIUM · CVSS 5 EPSS 3.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-08-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2015-4478

Severity

MEDIUM

CVSS

EPSS

3.37%

Firefox Java

Original NVD Description

Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin Policy via the reviver parameter to the JSON.parse method.