CVE-2015-9288 The Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to read messages or access online services via a victim's credentials
MediumCVSS 6.5
EPSS 0.88%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to read messages or access online services via a victim's credentials
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Unity web player | < 4.6.6f2 | 4.6.6f2 |
| Unity web player | >= 5.0, < 5.0.3f2 | 5.0.3f2 |
References
- blogs.unity3d.com vendor-advisory