CVE-2015-2917

no score yetEPSS 0.9%

securifi: no CVSS score yet. EPSS 0.9% chance of exploitation in the next 30 days.

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M unintentionally omit the X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site that contains a (1) FRAME, (2) IFRAME, or (3) OBJECT element.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2015-09-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

securifi:almond-2015_firmware
securifi:almond_firmware

References

http://www.kb.cert.org/vuls/id/906576
http://www.kb.cert.org/vuls/id/906576

Check your stack JSON