CVE-2015-8799

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1, and Data Center Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allows remote authenticated users to write update-package data to arbitrary agent locations via unspecified vectors.

• CWE-22

• http://www.securityfocus.com/bid/90885Third Party Advisory, VDB Entry
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160607_00Vendor Advisory
• http://www.securityfocus.com/bid/90885Third Party Advisory, VDB Entry
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160607_00Vendor Advisory

Published

Jun 8, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8793Cross-site scripting (XSS) vulnerability in program/include/…
• CVE-2015-8794Absolute path traversal vulnerability in program/steps/addre…
• CVE-2015-8795Multiple cross-site scripting (XSS) vulnerabilities in the A…
• CVE-2015-8796Cross-site scripting (XSS) vulnerability in webapp/web/js/sc…
• CVE-2015-8797Cross-site scripting (XSS) vulnerability in webapp/web/js/sc…
• CVE-2015-8798Directory traversal vulnerability in the Management Server i…8
• CVE-2015-8800Symantec Embedded Security: Critical System Protection (SES:…7.3
• CVE-2015-8801Race condition in the client in Symantec Endpoint Protection…
• CVE-2015-8802Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-8803The ecc_256_modp function in ecc-256.c in Nettle before 3.2 …
• CVE-2015-8804x86_64/ecc-384-modp.asm in Nettle before 3.2 does not proper…
• CVE-2015-8805The ecc_256_modq function in ecc-256.c in Nettle before 3.2 …