VULNERABILITY INTELLIGENCE

CVE-2015-2959

CVSS score7.5 HIGH
EPSS probability3.34%
CISA KEVNot currently listed
Published2015-06-09
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Zoho NetFlow Analyzer build 10250 and earlier does not check for administrative authorization, which allows remote attackers to obtain sensitive information, modify passwords, or remove accounts by leveraging the guest role.

Weakness classification

  • CWE-284: Improper Access Control

Primary references