CVE-2017-15220: Flexense Vx Search

Critical severity, CVSS 9.8. EPSS: 7.1% chance of exploitation in the next 30 days.

Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary code.

Affected products

• Flexense Vx Search: version 10.1.12 only

Published 2017-10-11. Last modified 2026-06-17.