# CVEs published 2015-10-27 9 CVEs were published on October 27, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-3996](https://cve.now/CVE-2015-3996.md): The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework before 2.5.3, as used (no CVSS) - [CVE-2015-5178](https://cve.now/CVE-2015-5178.md): The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) does not send (no CVSS) - [CVE-2015-5188](https://cve.now/CVE-2015-5188.md): Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat Enterprise Application Platform before 6.4.4 and (no CVSS) - [CVE-2015-5220](https://cve.now/CVE-2015-5220.md): The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly (formerly JBoss Application Server) allows remote (no CVSS) - [CVE-2015-5240](https://cve.now/CVE-2015-5240.md): Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, a (no CVSS, neutron) - [CVE-2015-5262](https://cve.now/CVE-2015-5262.md): http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration (no CVSS, org.apache.httpcomponents:httpclient) - [CVE-2015-7986](https://cve.now/CVE-2015-7986.md): The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memor (no CVSS) - [CVE-2015-5665](https://cve.now/CVE-2015-5665.md): Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows remote attackers to hijack the authentication (no CVSS) - [CVE-2015-6340](https://cve.now/CVE-2015-6340.md): The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices with software 19.0.M0.60737 allows remote atta (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-10-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.