Is CVE-2015-10007 actively exploited?

No active exploitation of CVE-2015-10007 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2015-10007 be exploited remotely?

Yes. CVE-2015-10007 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2015-10007?

CVE-2015-10007 has a CVSS score of 6.1 (MEDIUM).

HOME VULNERABILITIESCVE-2015-10007

MEDIUM

CVE-2015-10007

CWE-79Published: January 2, 2023· Updated: Jun 17, 2026

6.1

CVSS v3.1

Official Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is 43bad79392332fa39e31b95268e76fbda9fec3a4. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217184. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

NVD Source

Technical Analysis

CVE-2015-10007 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.

From a weakness classification perspective (CWE-79): Cross-site scripting (XSS) vulnerabilities allow attackers to inject malicious scripts into web pages viewed by other users.