CVE-2015-2990: Neojapan Desknet Neo

Medium severity, CVSS 4.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in zhtml.cgi in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote authenticated users to read arbitrary files via a crafted parameter.

Affected products

• Neojapan Desknet Neo: up to and including 2.5

Published 2015-09-05. Last modified 2026-06-17.