CVE-2015-2856
30Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 57%
from disclosure to weapon0 days
Published on NVDOct 10
metasploitJul 10
exploitation probability
57%top 1% of all CVEs
observed exploitation
nono source reports it
Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. (dot dot) in the statecode cookie.
Affected products
n/a · n/a