Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-a691-qtby-t7cz
Vulnerability ID VCID-a691-qtby-t7cz
Aliases CVE-2015-3202
Summary
Status Published
Exploitability 2.0
Weighted Severity 2.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-20 Improper Input Validation
System Score Found at
epss 0.00336 https://api.first.org/data/v1/epss?cve=CVE-2015-3202
epss 0.00336 https://api.first.org/data/v1/epss?cve=CVE-2015-3202
epss 0.00336 https://api.first.org/data/v1/epss?cve=CVE-2015-3202
cvssv2 4.1 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3202.json
https://api.first.org/data/v1/epss?cve=CVE-2015-3202
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3202
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1224103 https://bugzilla.redhat.com/show_bug.cgi?id=1224103
786439 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786439
786475 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786475
CVE-2015-3202;OSVDB-122415 Exploit https://gist.github.com/taviso/ecb70eb12d461dd85cba
CVE-2015-3202;OSVDB-122415 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/37089.txt
GLSA-201603-04 https://security.gentoo.org/glsa/201603-04
GLSA-201701-19 https://security.gentoo.org/glsa/201701-19
USN-2617-1 https://usn.ubuntu.com/2617-1/
USN-2617-2 https://usn.ubuntu.com/2617-2/
USN-2617-3 https://usn.ubuntu.com/2617-3/
Data source Exploit-DB
Date added May 23, 2015
Description Fuse 2.9.3-15 - Local Privilege Escalation
Ransomware campaign use Known
Source publication date May 23, 2015
Exploit type local
Platform linux
Source update date Oct. 10, 2016
Source URL https://gist.github.com/taviso/ecb70eb12d461dd85cba
Vector: AV:L/AC:M/Au:S/C:P/I:P/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.56803
EPSS Score 0.00336
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-10T18:05:01.534731+00:00 SUSE Severity Score Importer Import https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml 38.6.0