PRIOn knowledge basePRION:CVE-2014-6036Directory traversal
6.7 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.954 High
EPSS
Percentile
99.3%
Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11.3 and earlier, Social IT Plus 11.0, and IT360 10.3, 10.4, and earlier allows remote attackers or remote authenticated users to delete arbitrary files via a … (dot dot) in the fileName parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| manageengine_it360 | le | 10.4 | |
| manageengine_it360 | eq | 10.3.0 | |
| manageengine_opmanager | le | 11.3 | |
| manageengine_social_it_plus | eq | 11.0 |
Related
6.7 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.954 High
EPSS
Percentile
99.3%