Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2015-3269

Apache Flex BlazeDS, as used in flex-messaging-core.jar in Adobe LiveCycle Data Services (LCDS) 3.0.x before 3.0.0.354170, 4.5 before 4.5.1.354169, 4.6.2 before 4.6.2.354169, and 4.7 before 4.7.0.354169 and other products, allows remote attackers to read arbitrary files via an AMF message containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CVSS 5.0 · MediumBuzz score 24.4

Buzz score

Why this CVE is surfacing

Buzz score total 24.4

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 17.9 · diversity 6.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Mention score
17.9
5 evidence mentions in the snapshot
Diversity score
6.5
2 sources across 1 categories
KEV score
0.0
No KEV entry observed
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
5 source links · newest first
  • Lexmark Patches Critical Flaw in Printer Management ToolSecurityWeek

    Lexmark has released an update for its Markvision Enterprise printer management software to address serious vulnerabilities that could allow a remote attacker to execute arbitrary code on the server hosting the product. Markvision Enterprise is a web-based tool that allows IT professionals to manage up to 20,000 networked printers, regardless of the manufacturer.

    newswww.securityweek.comOct 20, 2016, 11:41 AM
  • VMware Updates Products Due to Flaw in Apache Flex BlazeDSSecurityWeek

    VMware has released updates for several of its products to address an information disclosure issue caused by a vulnerability in Apache Flex BlazeDS.

    newswww.securityweek.comNov 19, 2015, 6:41 PM
  • Adobe Releases Hotfix to Patch ColdFusion VulnerabilitySecurityWeek

    Adobe has released a hotfix to address an important vulnerability in the company’s ColdFusion development platform.

    newswww.securityweek.comAug 28, 2015, 5:52 AM
  • Apple users are vulnerable to sandbox vulnerabilitySecurity Affairs

    Experts discovered that the sandbox vulnerability affects all apps that use the managed app configuration setting in devices that run older versions. Kevin Watkins, a security researcher from Appthority, argues that users without iOS 8.4.1 are affected by the sandbox vulnerability, CVE-2015-3269. The flaw affects all apps that use the managed app configuration settings, meaning that […]

    newssecurityaffairs.comAug 21, 2015, 3:09 PM
  • Adobe Patches Vulnerability in LiveCycle Data ServicesSecurityWeek

    Adobe has released a security hotfix to address an XML External Entity (XXE) vulnerability in LiveCycle Data Services (DS). Adobe LiveCycle Data Services is a framework that simplifies the development of Flex and AIR applications. The solution provides data enabling capabilities such as synchronization, paging, conflict management and publish-subscribe messaging.

    newswww.securityweek.comAug 19, 2015, 10:51 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence
  • CVE-2026-53959

    4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows any authenticated user to enumerate account information for every user through GET /…

    CVSS 6.5 · Medium
    3 mentions
  • CVE-2026-76041

    Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security sev…

    CVSS N/A · Unrated
    2 mentions
  • CVE-2026-62988

    Froxlor is open source server administration software. From 2.3.7 until 2.3.8, the Customers.get, Customers.listing, Admins.get, Admins.listing, Ftps.get, and Ftps.listing API com…

    CVSS 9.0 · Critical
    4 mentions
  • CVE-2026-63640

    MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, when hideConfigSecrets is enabled, the catch-all socket dispatcher in js/node_helper.js passes every…

    CVSS 4.3 · Medium
    4 mentions
  • CVE-2026-75915

    CodeWhale versions before 0.8.64 contain an environment variable exposure vulnerability in the js_execution tool that fails to scrub parent process environment variables before sp…

    CVSS 8.7 · High
    3 mentions
  • CVE-2026-62684

    File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, the Link storage struct…

    CVSS 2.7 · Low
    3 mentions