CVE-2015-0666

Timeline

Detection, updates, and resolution for this record.

1. Apr 3, 2015 · Catalog

   Detected

   Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.

2. Mar 25, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Apr 15, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.

Affected

• cpe cisco/prime data center network managerversion unspecified
• cpe cisco/prime data center network manager6.3\(1\)
• cpe cisco/prime data center network manager6.3\(2\)
• cpe cisco/prime data center network manager7.0\(1\)
• vendor Cisco Prime Data Center Network Manager (DCNM)version unspecified

Sources

• CISA KEVCVE-2015-0666

  Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to read arbitrary files.

  cisa.gov
• CVE.orgCVE-2015-0666

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2015-0666

  30-day exploitation probability 40.4%

  first.org
• NIST NVDCVE-2015-0666

  Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.

  nvd.nist.gov

References

• Vendor Advisory · tools.cisco.com
• Broken Link · securitytracker.com
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov