GCVE-110-CERTCC-2014-978652

Advisory PublishedCVSS 6.8/10

Vulnetix · Advisory published May 5, 2015

Bomgar Remote Support version 14.3.1 and possibly earlier versions deserialize untrusted data without sufficient validation, allowing an attacker to potentially execute arbitrary PHP code.

Download JSON Open in Console

Risk Scores

CVSS 2.0

6.8/10

Medium · AV:N/AC:M/Au:N/C:P/I:P/A:P

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score5.3remediation_levelOFreport_confidenceCenvironmental_score1.33547225100581target_distributionLenvironmental_vectorCDP:ND/TD:L/CR:ND/IR:ND/AR:ND

Aliases

CVE-2015-0935

References

Bomgar Remote Support Portal deserializes untrusted data

advisory

Bomgar Remote Support Portal deserializes untrusted data

url

Bomgar Remote Support Portal deserializes untrusted data

url

Browse GCVE Records

73,877 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON