What is CVE-2015-4027?

CVE-2015-4027 is a vulnerability in Acunetix Web_vulnerability_scanner, classified under CWE-264. Published 2015-12-17.

Is CVE-2015-4027 known to be exploited?

18 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Acunetix Web_vulnerability_scanner

CVE-2015-4027

The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build 20151125 allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to api/addScan.

EPSS: 0.010 (77.4th percentile) — read the EPSS interpretation.

Affected products

Acunetix Web_vulnerability_scanner
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

1o24er/RedTeam
ARPSyndicate/cvemon
Al1ex/Red-Team
Apri1y/Red-Team-links
Echocipher/Resource-list
Ondrik8/RED-Team
dk47os3r/hongduiziliao
hasee2018/Safety-net-information
hudunkey/Red-Team-links
john-80/-007

References

cve@mitre.org (Exploit, x_refsource_MISC)
38847 (Exploit, exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2015-4027?: CVE-2015-4027 is a vulnerability in Acunetix Web_vulnerability_scanner, classified under CWE-264. Published 2015-12-17.
Is CVE-2015-4027 known to be exploited?: 18 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.