CVE-2015-4000

CVE-2015-4000, known as "Logjam," is a cipher-downgrade vulnerability affecting TLS 1.2 and earlier in numerous products including Apple, Google, Microsoft, and OpenSSL. It allows man-in-the-middle attackers to force connections to use weaker DHE_EXPORT ciphersuites, even if not initially supported by the client. While rated Low severity (CVSS 3.7) due to high attack complexity and limited impact (partial integrity loss), its high EPSS score (0.9364) and FAUCET Risk Score (99/100) indicate significant potential for exploitation. Although not on the KEV list and without public exploit code, it has received substantial community discussion and media coverage, with a Metasploit module available for version detection.