6.5
CVSSv3

CVE-2015-5071

Published: 15/01/2020 Updated: 24/01/2020
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

AR System Mid Tier in the AR System Mid Tier component prior to 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files via the __report parameter of the BIRT viewer servlet.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

bmc remedy ar system server 8.0

bmc remedy ar system server 9.0