CVE-2017-15220

Name of the Vulnerable Software and Affected Versions Flexense VX Search Enterprise version 10.1.12

Description The issue allows remote attackers to execute arbitrary code via a buffer overflow. This is achieved by sending an empty POST request to a long URI that begins with a /../ substring.

Recommendations For Flexense VX Search Enterprise version 10.1.12, consider restricting access to the affected URI endpoint to minimize the risk of exploitation. As a temporary workaround, avoid using long URIs starting with /../ until a patch is available.