VYPR
← All advisories
High severity8.6NVD Advisory· Published Jan 18, 2016· Updated May 6, 2026

CVE-2015-4988

CVE-2015-4988

Description

Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary files via unspecified vectors.

Affected products

9
  • IBM/Tealeaf Customer Experience9 versions
    cpe:2.3:a:ibm:tealeaf_customer_experience:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:ibm:tealeaf_customer_experience:*:*:*:*:*:*:*:*range: <=8.6
    • cpe:2.3:a:ibm:tealeaf_customer_experience:8.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tealeaf_customer_experience:8.8:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.0a:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1a:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.2a:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.