Lucene search

K
cvelistMitreCVELIST:CVE-2021-35975
HistoryNov 30, 2023 - 12:00 a.m.

CVE-2021-35975

2023-11-3000:00:00
mitre
www.cve.org
3
systematica
smtp adapter
radius
http adapter
mssql messagebus proxy
financial calculator
fix adapter
path traversal
vulnerability
remote attackers
read files
get parameter
url

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

35.9%

Absolute path traversal vulnerability in the Systematica SMTP Adapter component (up to v2.0.1.101) in Systematica Radius (up to v.3.9.256.777) allows remote attackers to read arbitrary files via a full pathname in GET parameter “file” in URL. Also: affected components in same product - HTTP Adapter (up to v.1.8.0.15), MSSQL MessageBus Proxy (up to v.1.1.06), Financial Calculator (up to v.1.3.05), FIX Adapter (up to v.2.4.0.25)

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

35.9%

Related for CVELIST:CVE-2021-35975