CVE catalog

CVE-2020-15648

UBUNTU-CVE-2020-15648

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.14% · Oct 25, 2026

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntufirefox16.0441.0.2+build2-0ubuntu1vulnerable
Ubuntufirefox16.0442.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0444.0+build3-0ubuntu2vulnerable
Ubuntufirefox16.0444.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0444.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0446.0+build5-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0446.0.1+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0447.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0448.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0+build4-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0.2+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0450.0+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0450.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0450.1.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0451.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0451.0.1+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0452.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0452.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0452.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0453.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0453.0.2+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0453.0.3+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0454.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0455.0.1+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0455.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0456.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0456.0+build6-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0457.0+build4-0ubuntu0.16.04.5vulnerable
Ubuntufirefox16.0457.0+build4-0ubuntu0.16.04.6vulnerable
Ubuntufirefox16.0457.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0457.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0457.0.4+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0458.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0458.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0458.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0+build5-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0.2+build1-0ubuntu0.16.04.3vulnerable
Ubuntufirefox16.0460.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0460.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0460.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0461.0+build3-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0461.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0462.0+build2-0ubuntu0.16.04.3vulnerable
Ubuntufirefox16.0462.0+build2-0ubuntu0.16.04.4vulnerable
Ubuntufirefox16.0462.0+build2-0ubuntu0.16.04.5vulnerable
Ubuntufirefox16.0462.0.3+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0463.0+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0463.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0464.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0465.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0465.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0+build3-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0466.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.4+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.5+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.2+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.4+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0468.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0468.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0468.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0469.0+build2-0ubuntu0.16.04.4vulnerable
Ubuntufirefox16.0469.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0469.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0470.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0470.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0471.0+build5-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0472.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0472.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0473.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0474.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0474.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0475.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0476.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0476.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0477.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0478.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0478.0.2+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0479.0+build1-0ubuntu0.16.04.2fixed
Ubuntufirefox18.0456.0+build6-0ubuntu1vulnerable
Ubuntufirefox18.0457.0.1+build2-0ubuntu1vulnerable
Ubuntufirefox18.0459.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox18.0459.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox18.0460.0+build2-0ubuntu1vulnerable
Ubuntufirefox18.0460.0.1+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0460.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0461.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0461.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.3vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.4vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.5vulnerable
Ubuntufirefox18.0462.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0463.0+build2-0ubuntu0.18.04.2vulnerable
Ubuntufirefox18.0463.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0464.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0465.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0465.0.1+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.4+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.5+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.2+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.4+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0470.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0470.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0471.0+build5-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0472.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0472.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0473.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0473.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0474.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0474.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0475.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0476.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0476.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0477.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0478.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0478.0.2+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0479.0+build1-0ubuntu0.18.04.1fixed
Ubuntuthunderbird18.041:52.4.0+build1-0ubuntu2vulnerable
Ubuntuthunderbird18.041:52.6.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird18.041:52.7.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird18.041:52.8.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:52.9.1+build3-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.2.1+build1-0ubuntu0.18.04.2vulnerable
Ubuntuthunderbird18.041:60.4.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.5.1+build2-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.6.1+build2-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.7.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.7.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.7.2+build2-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.8.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.9.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:68.2.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:68.2.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:68.4.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:68.7.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:68.8.0+build2-0ubuntu0.18.04.2vulnerable
Ubuntuthunderbird18.041:68.10.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:78.8.1+build1-0ubuntu0.18.04.1fixed
Ubuntumozjs5218.0452.3.1-0ubuntu3vulnerable
Ubuntumozjs5218.0452.3.1-7fakesync1vulnerable
Ubuntumozjs5218.0452.8.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs5218.0452.9.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu3vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu4vulnerable
Ubuntufirefox20.0469.0.3+build1-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0470.0.1+build1-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build5-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0473.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0474.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0475.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0476.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0476.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0477.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.2+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0479.0+build1-0ubuntu0.20.04.1fixed
Ubuntuthunderbird20.041:68.1.2+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.1.2+build1-0ubuntu2vulnerable
Ubuntuthunderbird20.041:68.2.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.2.2+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.3.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.3.1+build1-0ubuntu2vulnerable
Ubuntuthunderbird20.041:68.4.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.4.2+build2-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.5.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.6.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.7.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.7.0+build1-0ubuntu2vulnerable
Ubuntuthunderbird20.041:68.8.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntuthunderbird20.041:68.10.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:78.7.1+build1-0ubuntu0.20.04.1fixed
Ubuntumozjs6820.0468.5.0-1~fakesyncvulnerable
Ubuntumozjs6820.0468.5.0-2~fakesyncvulnerable
Ubuntumozjs6820.0468.6.0-1vulnerable
Ubuntumozjs6820.0468.6.0-1ubuntu1vulnerable
Ubuntumozjs5220.0452.9.1-1build1vulnerable
Ubuntumozjs5220.0452.9.1-1ubuntu3vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntufirefoxdeb16.0479.0+build1-0ubuntu0.16.04.2Not reportedUBUNTU-CVE-2020-15648Not reported
Ubuntufirefoxdeb18.0479.0+build1-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2020-15648Not reported
Ubuntuthunderbirddeb18.041:78.8.1+build1-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2020-15648Not reported
Ubuntufirefoxdeb20.0479.0+build1-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2020-15648Not reported
Ubuntuthunderbirddeb20.041:78.7.1+build1-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2020-15648Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References