When was CVE-2015-5452 disclosed?

CVE-2015-5452 was first published in the National Vulnerability Database on July 8, 2015, with the most recent update on May 6, 2026. EchelonGraph re-ingests CVE updates from NVD on a 2-hour cycle, so this page reflects the latest published state.

Is CVE-2015-5452 actively exploited?

CVE-2015-5452 is not currently on CISA's Known Exploited Vulnerabilities catalog. FIRST EPSS estimates a 97.2% percentile likelihood of exploitation in the next 30 days — higher percentiles indicate greater predicted risk.

How do I remediate CVE-2015-5452?

Patch to the fixed version published by the affected vendor. Where vendor advisories exist for CVE-2015-5452, EchelonGraph cross-links them in the Vendor Advisories panel below — those typically contain the canonical remediation steps, fixed version numbers, and any vendor-specific mitigations.

CVE-2015-5452

NONECVSS 0.0Weaponized

0.0

SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3.

CVSS v3: —
EG Score: 0.0(none)
EPSS: 97.2%
KEV: Not listed

References (16)

cve@mitrehttp://packetstormsecurity.com/files/132498/Watchguard-XCS-10.0-SQL-Injection-Command-Execution.html
cve@mitrehttp://packetstormsecurity.com/files/133721/Watchguard-XCS-Remote-Command-Execution.html
cve@mitrehttp://www.rapid7.com/db/modules/exploit/freebsd/http/watchguard_cmd_exec
cve@mitrehttp://www.security-assessment.com/files/documents/advisory/Watchguard-XCS-final.pdf
cve@mitrehttp://www.securityfocus.com/bid/75516
cve@mitrehttp://www.watchguard.com/support/release-notes/xcs/10/en-US/EN_Release_Notes_XCS_v10_0_Security_Hotfix/EN_Release_Notes_XCS_v10_0_Security_Hotfix.pdf
cve@mitrehttp://www.watchguard.com/support/release-notes/xcs/9/en-US/EN_ReleaseNotes_XCS_9_2_Security_Hotfix/EN_Release_Notes_XCS_v9_2_Security_Hotfix.pdf
cve@mitrehttps://www.exploit-db.com/exploits/38346/
af854a3a-2127-422b-91ae-364da2661108http://packetstormsecurity.com/files/132498/Watchguard-XCS-10.0-SQL-Injection-Command-Execution.html
af854a3a-2127-422b-91ae-364da2661108http://packetstormsecurity.com/files/133721/Watchguard-XCS-Remote-Command-Execution.html
af854a3a-2127-422b-91ae-364da2661108http://www.rapid7.com/db/modules/exploit/freebsd/http/watchguard_cmd_exec
af854a3a-2127-422b-91ae-364da2661108http://www.security-assessment.com/files/documents/advisory/Watchguard-XCS-final.pdf
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/75516
af854a3a-2127-422b-91ae-364da2661108http://www.watchguard.com/support/release-notes/xcs/10/en-US/EN_Release_Notes_XCS_v10_0_Security_Hotfix/EN_Release_Notes_XCS_v10_0_Security_Hotfix.pdf
af854a3a-2127-422b-91ae-364da2661108http://www.watchguard.com/support/release-notes/xcs/9/en-US/EN_ReleaseNotes_XCS_9_2_Security_Hotfix/EN_Release_Notes_XCS_v9_2_Security_Hotfix.pdf

Is Your Infrastructure Affected by CVE-2015-5452?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Start Free Scan →Browse All CVEs

CVE-2015-5452

Published

Last Modified

References (16)

Data Freshness Timeline

Publicly available exploits

Frequently asked(4)

Dependency Blast Radius

Is Your Infrastructure Affected by CVE-2015-5452?

CVE-2015-5452

📅 Published

🔄 Last Modified

🔗 References (16)

Data Freshness Timeline

Publicly available exploits

❓ Frequently asked(4)

Dependency Blast Radius

Is Your Infrastructure Affected by CVE-2015-5452?

Published

Last Modified

References (16)

Frequently asked(4)