CVE-2015-7266

7.5 highEPSS 1.1%

High (7.5) in iab open real-time bidding. EPSS 1.1% chance of exploitation in the next 30 days.

The Interactive Advertising Bureau (IAB) OpenRTB 2.3 protocol implementation might allow remote attackers to conceal the status of ad transactions and potentially compromise bid integrity by leveraging failure to limit the time between bid responses and impression notifications, aka the Amnesia Bug.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2018-10-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

iab:open_real-time_bidding

References

http://media.pixalate.com/white-papers/xindi.pdf
http://media.pixalate.com/white-papers/xindi.pdf

Check your stack JSON