CWE-23
Relative Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
417 vulnerabilities with CWE-23
CVE-2022-1373
HIGH
Softing Secure Integration Server v1.22 Remote Code Execution
CVSS 7.2
CVE-2022-1648
MEDIUM
Pandora FMS < 7.0_ng_760 - Authenticated Path Traversal and Remote Code Execution via File Manager
CVSS 5.7
CVE-2022-2139
MEDIUM
Advantech iView < 5.7.04.6469 - Path Traversal and Arbitrary Code Execution
CVSS 6.5
CVE-2022-31163
HIGH
TZInfo <0.36.1, <1.2.10 (with tzinfo-data) - Path Traversal
CVSS 7.5
CVE-2022-20913
MEDIUM
Cisco Nexus Dashboard 2.0-2.2(1e) - Authenticated Arbitrary File Write via Web Management Interface
CVSS 4.9
CVE-2022-20862
MEDIUM
Cisco Unified Communications Manager < 12.5(1)su6 and 14.0-14su2 - Authenticated Path Traversal
CVSS 4.3
CVE-2022-2106
LOW
Elcomplus SmartICS <2.3.4.0 - Path Traversal
CVSS 3.8
CVE-2022-29097
MEDIUM
Dell Wyse Management Suite < 3.6.1 - Path Traversal in Device API
CVSS 4.9
CVE-2022-2120
HIGH
OFFIS DCMTK <3.6.7 - Path Traversal
CVSS 7.5
CVE-2022-1661
HIGH
Keysight N6854A and N6841A RF Firmware < 2.4.0 - Path Traversal
CVSS 7.5
CVE-2022-20790
MEDIUM
Cisco Unified Communications Manager - Info Disclosure
CVSS 6.5
CVE-2022-22279
MEDIUM
Secure Remote Access/SMA <9.0.0.5-19sv - Info Disclosure
CVSS 4.9
CVE-2022-20755
CRITICAL
Cisco TelePresence Video Communication Server < 14.0.5 - Authenticated Path Traversal and Arbitrary File Write
CVSS 9.0
CVE-2022-20754
CRITICAL
Cisco Expressway Series/Cisco VCS - RCE
CVSS 9.0
CVE-2022-23732
HIGH
GitHub Enterprise Server < 3.1.19 - Path Traversal and CSRF Bypass in Management Console
CVSS 8.8
CVE-2022-21808
HIGH
Yokogawa CENTUM CS 3000 R3.08.10-R3.09.00, CENTUM VP R4.01.00-R4.03.00, Exaopc R3.72.00-R3.79.00 - Path Traversal
CVSS 8.8
CVE-2022-21177
HIGH
Yokogawa CENTUM CS 3000 R3.08.10-R3.09.00 and CENTUM VP R4.01.00-R4.03.00 - Path Traversal in CAMS for HIS Log Server
CVSS 8.1
CVE-2021-4459
MEDIUM
SMA Sunny Boy < 3.10.27.R - Authenticated Path Traversal
CVSS 6.5
CVE-2021-22281
MEDIUM
B&R Industrial Automation Studio 4.0-4.12 - Path Traversal
CVSS 6.3
CVE-2021-38399
HIGH
Honeywell Experion PKS - Path Traversal
CVSS 7.5
CVE-2021-22650
HIGH
Ovarro TWinSoft < 12.4 - Path Traversal and Remote Code Execution via Malicious TPG File
CVSS 7.5
CVE-2021-32964
MEDIUM
AGG Software Web Server <4.0.40.1014 - Path Traversal
CVSS 6.5
CVE-2021-34605
HIGH
XINJE XD/E Series PLC Program Tool < 3.5.1 - Arbitrary File Write via Zip Slip
CVSS 7.3
CVE-2021-32949
HIGH
MDT AutoSave <6.02.06 - Path Traversal
CVSS 7.5
CVE-2021-37196
MEDIUM
Siemens COMOS Web < 10.2, 10.3 < 10.3.3.3, 10.4 < 10.4.1 - Path Traversal via Archive Extraction
CVSS 6.5
Details
Vulnerabilities
417