CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-6500

Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated users to list directory contents and possibly cause a denial of service (CPU consumption) via a .. (dot dot) in the dir parameter to index.php/apps/files/ajax/scan.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 76.2%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2015-6500

Owncloud » Owncloud Server » Version: 7.0.0

cpe:2.3:a:owncloud:owncloud_server:7.0.0
Owncloud » Owncloud Server » Version: 7.0.1

cpe:2.3:a:owncloud:owncloud_server:7.0.1
Owncloud » Owncloud Server » Version: 7.0.2

cpe:2.3:a:owncloud:owncloud_server:7.0.2
Owncloud » Owncloud Server » Version: 7.0.3

cpe:2.3:a:owncloud:owncloud_server:7.0.3
Owncloud » Owncloud Server » Version: 7.0.4

cpe:2.3:a:owncloud:owncloud_server:7.0.4
Owncloud » Owncloud Server » Version: 7.0.5

cpe:2.3:a:owncloud:owncloud_server:7.0.5
Owncloud » Owncloud Server » Version: 7.0.6

cpe:2.3:a:owncloud:owncloud_server:7.0.6
Owncloud » Owncloud Server » Version: 7.0.7

cpe:2.3:a:owncloud:owncloud_server:7.0.7
Owncloud » Owncloud Server » Version: 8.0.0

cpe:2.3:a:owncloud:owncloud_server:8.0.0
Owncloud » Owncloud Server » Version: 8.0.2

cpe:2.3:a:owncloud:owncloud_server:8.0.2
Owncloud » Owncloud Server » Version: 8.0.3

cpe:2.3:a:owncloud:owncloud_server:8.0.3
Owncloud » Owncloud Server » Version: 8.0.4

cpe:2.3:a:owncloud:owncloud_server:8.0.4
Owncloud » Owncloud Server » Version: 8.0.5

cpe:2.3:a:owncloud:owncloud_server:8.0.5
Owncloud » Owncloud Server » Version: 8.1.0

cpe:2.3:a:owncloud:owncloud_server:8.1.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-6500

Products

Pricing

Contact Us