CVE-2015-2996
CVSS Score Not Available
88.23%
HIGH RiskEPSS (100th percentile)
Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the fileName parameter to getGfiUpgradeFile or (2) cause a denial of service (CPU and memory consumption) via a .. (dot dot) in the fileName parameter to calculateRdsFileChecksum.
Published: 6/8/2015
Modified: 4/12/2025
Vulnerability Summary
EPSS Score (Exploitation Probability)
88.23%HIGH Exploitation Risk
100th percentile
This vulnerability has a 88.23% probability of being exploited in the next 30 days, ranking higher than 100% of all scored CVEs.