{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:40:37Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20150727-CVE-2015-4287","slug":"cisco-sa-20150727-cve-2015-4287","vendor":"Cisco","title":"Cisco Firepower 9000 Series Unauthenticated Web Page Vulnerability","summary":"A vulnerability in the web interface of the Cisco Firepower 9000 device could allow an unauthenticated, remote attacker to access a web page that should be restricted. The vulnerability is due to improper authentication validation. An attacker could exploit this vulnerability by accessing a certain web page on the Cisco Firepower 9000 device that should be restricted to authenticated users. An exploit could allow the attacker to access details about the Cisco Firepower 9000 device that should be available only to an authenticated user. Cisco has confirmed the vulnerability; however, software updates are not available. To exploit this vulnerability, an attacker may need access to trusted, internal networks to access a certain web page on the device. This requirement could make exploitation difficult in environments that restrict network access from untrusted sources. Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.","severity":"Medium","published_at":"2015-07-27T20:54:06Z","updated_at":"2015-07-27T20:54:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150727-CVE-2015-4287","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20150727-CVE-2015-4287/csaf/Cisco-SA-20150727-CVE-2015-4287.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.0127},"cves":[{"id":"CVE-2015-4287","kev":false,"epss":{"score":0.0127,"percentile":0.66567,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"}}],"public_evidence":[{"product":{"name":"Cisco Firepower Extensible Operating System","slug":"cisco-firepower-extensible-operating-system","vendor":"Cisco"},"cve":{"id":"CVE-2015-4287"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:35:07Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Firepower Extensible Operating System","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.0127,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-07-27T20:54:06Z","updated_at":"2015-07-27T20:54:06Z","advisory_updated_at":"2015-07-27T20:54:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150727-CVE-2015-4287","row_display_order":1}]}