CVE-2021-4463

🗓️ 12 Nov 2025 22:07:30Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 7 Views🌐 WEB

Unauthenticated arbitrary file download in Longjing BEMS API up to version 1.21 via downloads endpoint.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-4463	12 Nov 202522:40	–	circl
CNNVD	Longjing BEMS API 安全漏洞	12 Nov 202500:00	–	cnnvd
Cvelist	CVE-2021-4463 Longjing Technology BEMS API <= 1.21 Remote Arbitrary File Download	12 Nov 202522:07	–	cvelist
EUVD	EUVD-2021-34715	13 Nov 202500:30	–	euvd
Nuclei	Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download	3 Jun 202606:04	–	nuclei
NVD	CVE-2021-4463	12 Nov 202522:15	–	nvd
OpenVAS	Generic HTTP Directory Traversal / File Inclusion (Web Application URL Parameter) - Active Check	26 Sep 201700:00	–	openvas
Positive Technologies	PT-2025-46728	12 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2021-4463	13 Nov 202523:08	–	redhatcve
Vulnrichment	CVE-2021-4463 Longjing Technology BEMS API <= 1.21 Remote Arbitrary File Download	12 Nov 202522:07	–	vulnrichment

Vulners

Node

shenzhen_longjing_technology bems_apiRange0–1.21

[
  {
    "defaultStatus": "unaffected",
    "product": "BEMS API",
    "vendor": "Shenzhen Longjing Technology Co. Ltd.",
    "versions": [
      {
        "lessThanOrEqual": "1.21",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5657.php
vulncheck	www.vulncheck.com/advisories/longjing-technology-bems-api-remote-arbitrary-file-download
cxsecurity	www.cxsecurity.com/issue/WLB-2021070173
exploit-db	www.exploit-db.com/exploits/50163
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/206477
packetstormsecurity	www.packetstormsecurity.com/files/163702
web	www.web.archive.org/web/20220527162453/http://www.ljkj2012.com/

Parameter	Position	Path	Description	CWE
fileName	query param	/api/downloads	Unauthenticated arbitrary file download via directory traversal in downloads endpoint.	CWE-552, CWE-22

14 May 2026 02:06Current

6.5Medium risk

Vulners AI Score6.5

CVSS 48.7

EPSS0.01851

SSVC