Is CVE-2015-3316 actively exploited?

No active exploitation of CVE-2015-3316 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2015-3316 be exploited remotely?

No. CVE-2015-3316 requires local access to exploit.

What is the CVSS score of CVE-2015-3316?

CVE-2015-3316 has a CVSS score of 4.6 (MEDIUM).

HOME VULNERABILITIESCVE-2015-3316

MEDIUM

CVE-2015-3316

NVD-CWE-noinfoPublished: June 17, 2015· Updated: Jun 17, 2026

4.6

CVSS v3.1

Official Description

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, allows local users to gain privileges via an unspecified environment variable.

NVD Source

Technical Analysis

CVE-2015-3316 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.

User Interaction

Scope

Impact

ConfidentialityP

IntegrityP

AvailabilityP

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected Vendors & Products

broadcom1 product(s)

network and systems management

ca6 product(s)

client automationnetwork and systems managementnsm job management optionuniversal job management agentvirtual assurance for infrastructure managersworkload automation ae

HP1 product(s)

hp-ux

IBM1 product(s)

aix

Linux1 product(s)

linux kernel

Oracle1 product(s)

solaris

Source: NVD CPE · 21 total CPE entries