CVE-2015-0201

score

<0.1

cvss

5.0

epss

1.9%

published

2015-03-10

kev added

—

first seen

2026-10-21

Pivotal Spring Framework 4.1.x before 4.1.5 contains a session fixation vulnerability caused by predictable session ids in the Java SockJS client, letting remote attackers send messages to other sessions, exploit requires remote message sending.