AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2015-6459

HIGH · CVSS 10 EPSS 3.05%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-09-18 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 10.0. It may be remotely exploitable.

CVE
CVE-2015-6459
Severity
HIGH
CVSS
10
EPSS
3.05%

Original NVD Description

Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 allows remote attackers to read or delete arbitrary files via a full pathname.