What is the CVSS score of EUVD-2015-0860?

EUVD-2015-0860 has a CVSS 3.1 base score of 3.9 (Low). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.1%.

Which versions of Ubuntu are affected by EUVD-2015-0860?

CVE-2015-0849 is a low-severity vulnerability in pycode-browser before version 1.0 (CVSS 3.9).. A patch is available.

How to fix or mitigate EUVD-2015-0860?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Ubuntu EUVD-2015-0860

| CVE-2015-0849 LOW

Insecure Temporary File (CWE-377)

2025-06-26 security@debian.org

Information Disclosure Debian Ubuntu

3.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.9 LOW

AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Ubuntu

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 15, 2026 - 23:54 euvd

EUVD-2015-0860

Analysis Generated

Mar 15, 2026 - 23:54 vuln.today

CVE Published

Jun 26, 2025 - 22:15 nvd

LOW 3.9

DescriptionCVE.org

pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability.

Analysis

pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability.

Technical ContextAI

This vulnerability is classified as Insecure Temporary File (CWE-377).

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

Same weakness CWE-377 – Insecure Temporary File

View all

CVE-2022-21809 HIGH POC

8.1

CVE-2022-0736 HIGH POC

7.5

CVE-2022-3952 HIGH POC

7.1

CVE-2015-5224 CRITICAL

9.8

CVE-2022-26386 MEDIUM POC

6.5

CVE-2022-21945 MEDIUM POC

6.1

CVE-2022-3969 MEDIUM POC

5.5

CVE-2021-29429 MEDIUM POC

5.5

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

Ubuntu

Priority: Medium

pycode-browser

Release	Status	Version
bionic	not-affected	1:1.0-2
cosmic	not-affected	1:1.0-2
disco	not-affected	1:1.0-2
precise	DNE	-
upstream	released	1:1.0-1
utopic	ignored	end of life
vivid	ignored	end of life
wily	not-affected	1:1.0-2
xenial	not-affected	1:1.0-2
yakkety	not-affected	1:1.0-2
zesty	not-affected	1:1.0-2
artful	not-affected	1:1.0-2
trusty	DNE	trusty/esm was DNE [trusty was needed]

Debian

Bug #790365

pycode-browser

Release	Status	Fixed Version	Urgency
bullseye	fixed	1:1.02+git20181006-5	-
bookworm	fixed	1:1.03-1	-
forky, sid, trixie	fixed	1:1.03-3	-
(unstable)	fixed	1:1.0-1	unimportant

EUVD-2015-0860 vulnerability details – vuln.today

Back

Ubuntu EUVD-2015-0860

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

Same weakness CWE-377 – Insecure Temporary File

Same technique Information Disclosure

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code