2 matches found
CVE-2015-5072
The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the imageid parameter...
6.5CVSS5.7AI score0.01681EPSS
SaveExploits0References3
CVE-2015-5072: Improper Privilege Management
The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the imageid parameter...
6.5CVSS6.8AI score0.01681EPSS
SaveExploits0References2
20