{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T12:07:09Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20150724-CVE-2015-4288","slug":"cisco-sa-20150724-cve-2015-4288","vendor":"Cisco","title":"Multiple Cisco Products LDAP Server SSL Certificate Validation Vulnerability","summary":"A vulnerability in SSL certificate validation of multiple Cisco products could allow an unauthenticated, remote attacker to stage a man-in-the-middle attack. The vulnerability is due to lack of SSL certificate validation for secure LDAP. An attacker could exploit this vulnerability to stage a man-in-the-middle attack when secure LDAP is enabled on an affected device. Successful exploitation could allow the attacker to access sensitive information. Cisco has confirmed the vulnerability; however, software updates are not available. To exploit this vulnerability, an attacker must be in a position in the network to conduct a man-in-the-middle attack between devices communicating with the targeted device. In addition, the attacker may need to acquire additional information about the device, such as whether secure LDAP is enabled on the device. This feature must be enabled for a successful exploit. Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.","severity":"Medium","published_at":"2015-07-24T19:21:06Z","updated_at":"2015-07-24T19:21:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150724-CVE-2015-4288","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20150724-CVE-2015-4288/csaf/Cisco-SA-20150724-CVE-2015-4288.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":3,"public_evidence_count":3,"kev_count":0,"highest_epss":0.00477},"cves":[{"id":"CVE-2015-4288","kev":false,"epss":{"score":0.00477,"percentile":0.38127,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"}}],"public_evidence":[{"product":{"name":"Cisco Web Security Appliance (WSA)","slug":"cisco-web-security-appliance-wsa","vendor":"Cisco"},"cve":{"id":"CVE-2015-4288"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:38:36Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Web Security Appliance (WSA)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00477,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-07-24T19:21:06Z","updated_at":"2015-07-24T19:21:06Z","advisory_updated_at":"2015-07-24T19:21:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150724-CVE-2015-4288","row_display_order":1},{"product":{"name":"Cisco Email Security Appliance (ESA)","slug":"cisco-email-security-appliance-esa","vendor":"Cisco"},"cve":{"id":"CVE-2015-4288"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:38:36Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Email Security Appliance (ESA)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00477,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-07-24T19:21:06Z","updated_at":"2015-07-24T19:21:06Z","advisory_updated_at":"2015-07-24T19:21:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150724-CVE-2015-4288","row_display_order":2},{"product":{"name":"Cisco Content Security Management Appliance (SMA)","slug":"cisco-content-security-management-appliance-sma","vendor":"Cisco"},"cve":{"id":"CVE-2015-4288"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:38:36Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Content Security Management Appliance (SMA)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00477,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-07-24T19:21:06Z","updated_at":"2015-07-24T19:21:06Z","advisory_updated_at":"2015-07-24T19:21:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150724-CVE-2015-4288","row_display_order":3}]}