CVE Feed

    Dashboard / CVE / CVE-2016-8515

    CVE-2016-8515

    A remote malicious file upload vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.

    Published:Feb 15, 2018
    Last Modified:Nov 21, 2024
    EPS:Feb 15, 2018
    EPSS Score:0.01521
    CVSS Score:8.8

    Affected Products

    Vendor
    Hp
    Product
    Version Control Repository Manager

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs

    Related CVEs

    CVE-2016-8513 (CVSS 8) — A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. …
    CVE-2017-5787 (CVSS 6.5) — A remote denial of service vulnerability in HPE Version Control Repository Manager (VCRM) in all versions prio…
    CVE-2016-8514 (CVSS 6.5) — A remote information disclosure in HPE Version Control Repository Manager (VCRM) was found. The problem impact…
    CVE-2015-8651 (CVSS 8.8) — Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS…
    CVE-2015-5413 (CVSS 4) — HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to gain privileges…
    CVE-2015-5412 (CVSS 6) — Cross-site request forgery (CSRF) vulnerability in HP Version Control Repository Manager (VCRM) before 7.5.0 a…
    CVE-2015-5411 (CVSS 6.8) — HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to obtain sensitiv…
    CVE-2015-5410 (CVSS 6.5) — HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to execute arbitra…
    CVE-2015-5409 (CVSS 7.5) — Buffer overflow in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users…
    CVE-2015-3113 (CVSS 9.8) — Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High