{"id":"CVE-2015-1932","aliases":["EUVD-2015-2037","GHSA-hfh8-g43j-h4v7"],"status":"published","title":"IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5...","description":"IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensitive information about the proxy-server software by reading the HTTP Via header.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02107,"percentile":0.81866,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2015-08-22T23:00:00Z","modified":"2026-06-17T00:23:15Z","products":[{"vendor":"ibm","product":"websphere_application_server"},{"vendor":"ibm","product":"websphere_virtual_enterprise"}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21963275","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1033325","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/76466","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI38403","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1932"},{"url":"https://github.com/advisories/GHSA-hfh8-g43j-h4v7"}],"sources":{"cve":[{"id":"CVE-2015-1932","description":"IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensitive information about the proxy-server software by reading the HTTP Via header.","status":"published","published":"2015-08-22T23:00:00Z","modified":"2024-08-06T05:02:42.373Z","updated_at":"2026-11-02T14:35:44.046042Z"}],"euvd":[{"id":"EUVD-2015-2037","description":"IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensitive information about the proxy-server software by reading the HTTP Via header.","status":"published","published":"2015-08-22T23:00:00Z","modified":"2024-08-06T05:02:42Z","updated_at":"2026-11-03T02:22:13.664628Z"}],"ghsa":[{"id":"GHSA-hfh8-g43j-h4v7","title":"IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5...","description":"IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensitive information about the proxy-server software by reading the HTTP Via header.","status":"published","published":"2022-05-17T00:52:45Z","modified":"2023-02-03T05:02:43Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:53:13.255536Z"}],"nvd":[{"id":"CVE-2015-1932","description":"IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensitive information about the proxy-server software by reading the HTTP Via header.","status":"published","published":"2015-08-22T23:59:01.797Z","modified":"2026-06-17T00:23:15.273Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:08.998581Z"}]}}