CVE-2015-5235

MEDIUM · CVSS 4.3 EPSS 3.02%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-10-09 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2015-5235

Severity

MEDIUM

CVSS

4.3

EPSS

3.02%

Original Filing — NVD Description

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page.