CVE-2015-8256

Axis Communications

Published: 17 April 2017
Last modified: 17 June 2026
CVSS: 6.1 v3.0
Severity: medium
EPSS: 50.8% (99th pct)
CISA KEV: Not listed
NVD status: Modified
Weaknesses: CWE-79

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.

Exploitation

Not listed in the CISA Known Exploited Vulnerabilities catalogue as of 2026.09.04. The catalogue records confirmed public exploitation. Absence from it does not establish that exploitation has not occurred. EPSS models a 50.8% probability of exploitation activity in the next 30 days, placing it in the top decile of all scored CVEs.

Affected products

Product	Vendor	Type	Versions named
Cannon Network Camera	Axis Communications	IP camera	—
Explosion-protected Camera	Axis Communications	IP camera	—
Fixed Box Camera	Axis Communications	IP camera	—
Fixed Bullet Camera	Axis Communications	IP camera	—
Fixed Dome Camera	Axis Communications	IP camera	—
Modular Camera	Axis Communications	IP camera	—
Network Camera	Axis Communications	IP camera	—
Onboard Camera	Axis Communications	IP camera	—
Panoramic Camera	Axis Communications	IP camera	—
PTZ Camera	Axis Communications	IP camera	—
Thermal Camera	Axis Communications	IP camera	—

References

http://packetstormsecurity.com/files/141674/AXIS-Network-Camera-Cross-Site-Scripting.html exploit
http://www.securityfocus.com/bid/97699 third-party
https://www.exploit-db.com/exploits/39683/ exploit
http://packetstormsecurity.com/files/141674/AXIS-Network-Camera-Cross-Site-Scripting.html exploit
http://www.securityfocus.com/bid/97699 third-party
https://www.exploit-db.com/exploits/39683/ exploit

CVE-2015-8256 at NVD

Record assembled from NVD, CISA KEV 2026.09.04 and FIRST EPSS 2026-09-04. Affected products are those NVD's CPE configuration names that fall inside this site's scope; a CVE may affect products outside it.