AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2015-6997

MEDIUM · CVSS 4.3 EPSS 0.90%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-10-23 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2015-6997
Severity
MEDIUM
CVSS
4.3
EPSS
0.90%

Original Filing — NVD Description

The X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.