CVE-2015-2860

Directory traversal vulnerability in Avigilon Control Center (ACC) 4 before 4.12.0.54 and 5 before 5.4.2.22 allows remote attackers to read arbitrary files via a crafted help/ URL.

• CWE-22

• http://www.kb.cert.org/vuls/id/555984Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/75115
• http://www.kb.cert.org/vuls/id/555984Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/75115

Published

Jun 23, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2854The WebUI component in Blue Coat SSL Visibility Appliance SV…
• CVE-2015-2855The WebUI component in Blue Coat SSL Visibility Appliance SV…
• CVE-2015-2856Directory traversal vulnerability in the template function i…
• CVE-2015-2857Accellion File Transfer Appliance before FTA_9_11_210 allows…9.8
• CVE-2015-2858Datalex airline booking software before 2015-09-03 allows re…
• CVE-2015-2859Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 an…
• CVE-2015-2861Cross-site request forgery (CSRF) vulnerability in Vesta Con…
• CVE-2015-2862Directory traversal vulnerability in Kaseya Virtual System A…
• CVE-2015-2863Open redirect vulnerability in Kaseya Virtual System Adminis…
• CVE-2015-2864Retrospect and Retrospect Client before 10.0.2.119 on Window…
• CVE-2015-2865Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-2866SQL injection vulnerability on the Grandstream GXV3611_HD ca…