CVE-2015-4716

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 24.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-10-21 · updated 2026-06-17
Weakness: CWE-22

Description

Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall the application or execute arbitrary code via unspecified vectors.

Affected products

Microsoft Corporation Windows: all versions
Owncloud: through 7.0.5
ownCloud: 8.0.0, 8.0.2, 8.0.3

References

http://www.debian.org/security/2015/dsa-3373
http://www.securityfocus.com/bid/76159
https://owncloud.org/security/advisory/?id=oc-sa-2015-006
http://www.debian.org/security/2015/dsa-3373
http://www.securityfocus.com/bid/76159
https://owncloud.org/security/advisory/?id=oc-sa-2015-006

Get alerted when CVE-2015-4716 or the next vulnerability affects your stack