What is the CVSS score of EUVD-2015-0860?

EUVD-2015-0860 has a CVSS 3.1 base score of 3.9 (Low). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.1%.

Which versions of Ubuntu are affected by EUVD-2015-0860?

CVE-2015-0849 is a low-severity vulnerability in pycode-browser before version 1.0 (CVSS 3.9).. A patch is available.

How to fix or mitigate EUVD-2015-0860?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Ubuntu EUVD-2015-0860

| CVE-2015-0849 LOW

Insecure Temporary File (CWE-377)

2025-06-26 security@debian.org

Information Disclosure Ubuntu Debian

3.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.9 LOW

AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Ubuntu

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 15, 2026 - 23:54 euvd

EUVD-2015-0860

Analysis Generated

Mar 15, 2026 - 23:54 vuln.today

CVE Published

Jun 26, 2025 - 22:15 nvd

LOW 3.9

DescriptionCVE.org

pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability.

Analysis

pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability.

Technical ContextAI

This vulnerability is classified as Insecure Temporary File (CWE-377).

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

Same weakness CWE-377 – Insecure Temporary File

View all

CVE-2022-21809 HIGH POC

8.1

CVE-2022-0736 HIGH POC

7.5

CVE-2022-3952 HIGH POC

7.1

CVE-2015-5224 CRITICAL

9.8

CVE-2022-26386 MEDIUM POC

6.5

CVE-2022-21945 MEDIUM POC

6.1

CVE-2022-3969 MEDIUM POC

5.5

CVE-2021-29429 MEDIUM POC

5.5

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

Vendor StatusVendor

Ubuntu

Priority: Medium

pycode-browser

Release	Status	Version
bionic	not-affected	1:1.0-2
cosmic	not-affected	1:1.0-2
disco	not-affected	1:1.0-2
precise	DNE	-
upstream	released	1:1.0-1
utopic	ignored	end of life
vivid	ignored	end of life
wily	not-affected	1:1.0-2
xenial	not-affected	1:1.0-2
yakkety	not-affected	1:1.0-2
zesty	not-affected	1:1.0-2
artful	not-affected	1:1.0-2
trusty	DNE	trusty/esm was DNE [trusty was needed]

Debian

Bug #790365

pycode-browser

Release	Status	Fixed Version	Urgency
bullseye	fixed	1:1.02+git20181006-5	-
bookworm	fixed	1:1.03-1	-
forky, sid, trixie	fixed	1:1.03-3	-
(unstable)	fixed	1:1.0-1	unimportant

EUVD-2015-0860 vulnerability details – vuln.today

Back

Ubuntu EUVD-2015-0860

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

Same weakness CWE-377 – Insecure Temporary File

Same technique Information Disclosure

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code