AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2015-2856

HIGH · CVSS 7.5 EPSS 56.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-10-10 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2015-2856
Severity
HIGH
CVSS
7.5
EPSS
56.57%

Original Filing — NVD Description

Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. (dot dot) in the statecode cookie.