CVE-2015-5232

Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.

8.1 High

Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.68%Up 0.7 points since Feb 4, 2022

What each source reports

NVD Score used 8.1

Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.

Record: CVE-2015-5232
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-362
Updated: 2026-11-02

CVE List No score

Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.

Record: CVE-2015-5232
Updated: 2026-11-02

EUVDEUVD-2015-5228 No score

Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.

Record: EUVD-2015-5228
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5rxj-5whp-c8wv 8.1

Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.

Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.

Record: GHSA-5rxj-5whp-c8wv
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-362
Updated: 2026-11-02

Affected products

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-5232 is a high vulnerability (CVSS 8.1) in Cornelisnetworks Opa-ff, published June 7, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.68%, the 76th percentile. No source names a fixed version.

Attack profile

How easy it is to exploit

What an attacker can affect

Exploit likelihood

What each source reports

Affected products

History

In short

References