What’s Vulnerable › Vulnerabilities
CVE-2015-2858
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2015-10-02 · updated 2026-06-17
Description
Datalex airline booking software before 2015-09-03 allows remote attackers to read or write to arbitrary user data via a modified profileId parameter to (1) ValidateFormAction.do or (2) ProfileConfirmEditAddressAction.do.
Affected products
- Datalex Airline Booking Software: all versions
References
Get alerted when CVE-2015-2858 or the next vulnerability affects your stack