CVE-2015-2860

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-06-23 · updated 2026-06-17
Weakness: CWE-22

Description

Directory traversal vulnerability in Avigilon Control Center (ACC) 4 before 4.12.0.54 and 5 before 5.4.2.22 allows remote attackers to read arbitrary files via a crafted help/ URL.

Affected products

Avigilon Control Center: through 5.4.2.21; through 4.12.0.53

References

http://www.kb.cert.org/vuls/id/555984
http://www.securityfocus.com/bid/75115
http://www.kb.cert.org/vuls/id/555984
http://www.securityfocus.com/bid/75115

Get alerted when CVE-2015-2860 or the next vulnerability affects your stack