CVE-2018-10615

HIGH

GE MDS PulseNET <3.2.1 - Path Traversal

Title source: llm

Description

Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior host platform.

Scores

CVSS v3 8.1
EPSS 0.0174
EPSS Percentile 82.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Classification

CWE
CWE-22 CWE-23
Status published

Affected Products (2)

ge/mds_pulsenet < 3.2.1
ge/mds_pulsenet < 3.2.1

Timeline

Published Jun 04, 2018
Tracked Since Feb 18, 2026