Unrated severityNVD Advisory· Published Sep 17, 2015· Updated May 6, 2026

CVE-2015-4040

Description

Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to access arbitrary files in the web root via unspecified vectors.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

support.f5.com/kb/en-us/solutions/public/17000/200/sol17253.htmlnvdVendor Advisory
packetstormsecurity.com/files/133931/F5-BigIP-10.2.4-Build-595.0-HF3-Path-Traversal.htmlnvd
www.securitytracker.com/id/1033532nvd
www.securitytracker.com/id/1033533nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000