CVE-2015-5071

中危 6.5CVE-2015-5071 · Published 15/01/2020 · updated 17/06/2026

要点

CVE-2015-5071 是影响 remedy ar system server (bmc) 的中危 (CVSS 6.5)漏洞。
未来 30 天内被利用的概率（EPSS）：1.8%，高于 78.2% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
remedy ar system server bmc	`= 8.0= 9.0`	No fix yet

Description

AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files via the __report parameter of the BIRT viewer servlet.

References

communities.bmc.com/docs/DOC-77816 · Third Party Advisory
packetstormsecurity.com/files/133688/BMC-Remedy-AR-8.1-9.0-File-Inclusion.html · Third Party Advisory

remedy ar system server 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free