Is CVE-2015-3318 actively exploited?

No active exploitation of CVE-2015-3318 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2015-3318 be exploited remotely?

No. CVE-2015-3318 requires local access to exploit.

What is the CVSS score of CVE-2015-3318?

CVE-2015-3318 has a CVSS score of 4.6 (MEDIUM).

HOME VULNERABILITIESCVE-2015-3318

MEDIUM

CVE-2015-3318

CWE-20Published: June 17, 2015· Updated: Jun 17, 2026

4.6

CVSS v3.1

Official Description

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly validate an unspecified variable, which allows local users to gain privileges via unknown vectors.

NVD Source

Technical Analysis

CVE-2015-3318 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.

User Interaction

Scope

Impact

ConfidentialityP

IntegrityP

AvailabilityP

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected Vendors & Products

ca6 product(s)

client automationnetwork and systems managementnsm job management optionuniversal job management agentvirtual assurance for infrastructure managersworkload automation ae

HP1 product(s)

hp-ux

IBM1 product(s)

aix

Linux1 product(s)

linux kernel

Oracle1 product(s)

solaris

Source: NVD CPE · 20 total CPE entries