CVE-2015-2918

6.1 mediumEPSS 0.7%

The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2015-12-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

orientdb:orientdb

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-g4gg-9f62-jfph	Maven	com.orientechnologies:orientdb-studio	<2.0.15	2.0.15
GHSA-g4gg-9f62-jfph	Maven	com.orientechnologies:orientdb-studio	>=2.1.0 <2.1.1	2.1.1

References

https://www.kb.cert.org/vuls/id/845332
https://www.kb.cert.org/vuls/id/845332

Check your stack JSON