Unrated severityNVD Advisory· Published Jun 9, 2015· Updated May 6, 2026
CVE-2015-2959
CVE-2015-2959
Description
Zoho NetFlow Analyzer build 10250 and earlier does not check for administrative authorization, which allows remote attackers to obtain sensitive information, modify passwords, or remove accounts by leveraging the guest role.
Affected products
1- cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:-:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- support.zoho.com/portal/manageengine/helpcenter/articles/vulnerability-fix-for-fails-to-restrict-access-permissions-cross-site-scripting-cross-site-request-forgery-over-build-10250nvdPatchVendor Advisory
- jvn.jp/en/jp/JVN25598413/index.htmlnvdVendor Advisory
- jvndb.jvn.jp/jvndb/JVNDB-2015-000075nvdVendor Advisory
- www.securityfocus.com/bid/75065nvd
- www.securitytracker.com/id/1032516nvd
News mentions
0No linked articles in our index yet.