Medium severity6.5NVD Advisory· Published Jan 15, 2020· Updated Jun 17, 2026
CVE-2015-5071
CVE-2015-5071
Description
AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files via the __report parameter of the BIRT viewer servlet.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:bmc:remedy_ar_system_server:8.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:bmc:remedy_ar_system_server:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:bmc:remedy_ar_system_server:9.0:*:*:*:*:*:*:*
- (no CPE)range: <9.0 SP1
- BMC/AR System Mid Tierdescription
- Range: <9.0 SP1
Patches
Vulnerability mechanics
References
2- communities.bmc.com/docs/DOC-77816nvdThird Party Advisory
- packetstormsecurity.com/files/133688/BMC-Remedy-AR-8.1-9.0-File-Inclusion.htmlnvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.