{"cve_id":"CVE-2015-8562","published":"2015-12-16T21:59:06.390000+00:00","last_modified":"2026-06-17T00:34:46.897000+00:00","vuln_status":"Modified","description":"Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP User-Agent header, as exploited in the wild in December 2015.","cvss_version":"2.0","cvss_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","base_score":7.5,"base_severity":"HIGH","attack_vector":"NETWORK","privileges_req":"","user_interaction":"NONE","scope":"","impact_c":"PARTIAL","impact_i":"PARTIAL","impact_a":"PARTIAL","cwe_ids":["CWE-20"],"in_kev":false,"kev_date_added":null,"kev_ransomware":false,"epss_score":0.98193,"epss_percentile":0.99914,"cap_rule_version":"0.1.1","stage":"RECON","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"NONE","caps":["INFO_DISCLOSURE","TAMPER"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T08:26:11.536132+00:00","first_seen":"2015-12-16T21:59:06.390000+00:00","kev_first_seen":null,"novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["joomla"],"products":["joomla\\!"],"affected":[{"vendor":"joomla","product":"joomla\\!","ranges":["1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","1.5.6","1.5.7","1.5.8","1.5.9","1.5.10","1.5.11","1.5.12","1.5.13","1.5.14","1.5.15","1.5.16","1.5.17","1.5.18","1.5.19","1.5.20","1.5.21","1.5.22","1.5.23","1.5.24","1.5.25","1.5.26","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","2.5.0","2.5.1","2.5.2","2.5.3","2.5.4","2.5.5","2.5.6","2.5.7","2.5.8","2.5.9","2.5.10","2.5.11","2.5.12","2.5.13","2.5.14","2.5.15","2.5.16","2.5.17","2.5.18","2.5.19","2.5.20","2.5.21","2.5.22","2.5.23","2.5.24","2.5.25","2.5.26","2.5.27","2.5.28","3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.4.0","3.4.1","3.4.2","3.4.3","3.4.4","3.4.5"]}]}