VULNERABILITY INTELLIGENCE

CVE-2015-4527

CVSS score7.8 HIGH
EPSS probability2.73%
CISA KEVNot currently listed
Published2015-07-23
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:N

Description

Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition (AVE) 7.x before 7.1.2 allows remote attackers to read arbitrary files by using the Avamar Desktop/Laptop client interface to send crafted parameters.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references