Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2015-12-31	CVE-2015-2918	Improper Input Validation vulnerability in Orientdb 2.0.14/2.1.0 The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site. network low complexity orientdb CWE-20	6.1
2015-12-31	CVE-2015-2913	Information Exposure vulnerability in Orientdb 2.0.14/2.1.0 server/network/protocol/http/OHttpSessionManager.java in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 improperly relies on the java.util.Random class for generation of random Session ID values, which makes it easier for remote attackers to predict a value by determining the internal state of the PRNG in this class. network high complexity orientdb CWE-200	5.9