CVE-2015-7919

critical

Published 2015-12-21 · Modified 2026-05-06

CVSS v3

10.0

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

CVSS v2

6.4

VIR risk

10.0

Description

SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently cause a denial of service (application crash), via unspecified vectors.

Predictions

Exploit likelihood

98%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact

Vendor	Product	Versions	Fixed
searchblox	searchblox	`8.3.0`

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-337-01
https://ics-cert.us-cert.gov/advisories/ICSA-15-337-01

CWEs

CWE-264

Verify integrity in audit chain (admin only). AS-IS.