Vulnerability record · CVE-2015-2096 · published 9 March 2015

CVE-2015-2096: Webgateinc edvr manager vulnerability

WWebgateinc · Edvr Manager

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload.

6.8 CVSS 2.0 Medium EPSS 2.5% · top 15.8%

6.8CVSS 2.0 base score

2.5%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References

17 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

WEdvr Manager Webgateinc

References

Link	Tags
http://www.securityfocus.com/bid/72849
http://www.zerodayinitiative.com/advisories/ZDI-15-069/
http://www.securityfocus.com/bid/72849
http://www.zerodayinitiative.com/advisories/ZDI-15-069/

Track CVE-2015-2096 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2015-2098Webgateinc edvr manager classic buffer overflow vulnerabilityMultiple stack-based buffer overflows in WebGate eDVR Manager allow remote attackers to execute arbitrary code via unspecified vectors to the (1) Con…EPSS 14%22 Jul 2021 6.8CVE-2015-2095Webgateinc edvr manager memory buffer overflow vulnerabilityHeap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attacker…EPSS 2.7%9 Mar 2015

Source: NIST National Vulnerability Database (record CVE-2015-2096), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.