CVE-2015-2996

CVE-2015-2996 details multiple directory traversal vulnerabilities in SysAid Help Desk versions prior to 15.2. These flaws allow unauthenticated remote attackers to read arbitrary files or cause a denial of service by manipulating file path parameters. With a CVSS score of 8.5 (High), the vulnerability is easily exploitable over the network with low attack complexity, leading to partial confidentiality and complete availability impacts. While not in CISA's KEV catalog, exploit modules exist in Metasploit and Nuclei, indicating readily available exploit code, though there is no evidence of active exploitation or significant community discussion.