CVE-2009-0615

VendorciscoProductapplication control engine device manager, application networking managerDiscoveredFeb 26, 2009UpdatedApr 23, 2026

Directory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and Application Control Engine (ACE) Device Manager before A3(2.1) allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid directory permissions."

View graph Watch Export

CVSS v3.1

—

EPSS

2.04%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

Connections

3 relationships

CWE-22

source

Timeline

disclosure → media coverage

Feb 26, 2009

Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026