CVE-2017-15220

Critical

Published: 11/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Flexense VX Search Enterprise version 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary code.

Risk Assessment

This vulnerability poses a serious risk to organizations as it allows remote code execution, potentially leading to system compromise.

Recommendation

It is recommended to update Flexense VX Search Enterprise to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary code.