Every CVE Search/ Get API key

CVE-2015-1500

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and...

6.8 Medium

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to (1) graphManager.load or (2) factory.load.

Exploit likelihood

8.16%Up 2.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to (1) graphManager.load or (2) factory.load.

Record
CVE-2015-1500
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to (1) graphManager.load or (2) factory.load.

Record
CVE-2015-1500
Updated
2026-11-02
EUVDEUVD-2015-1634 No score

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to (1) graphManager.load or (2) factory.load.

Record
EUVD-2015-1634
Updated
2026-11-03
GitHub AdvisoriesGHSA-8r8q-88h7-vv6g No score

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and...

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to (1) graphManager.load or (2) factory.load.

Record
GHSA-8r8q-88h7-vv6g
Weakness
CWE-119
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-1500 is a medium vulnerability (CVSS 6.8) in Solarwinds Server And Application Monitor, published February 16, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.16%, the 94th percentile. No source names a fixed version.

References

MoveEnter Open