CVE-2014-8555: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attackers to read arbitrary files via a .. dot dot in the selection parameter...

PT-2014-8616

Name of the Vulnerable Software and Affected Versions Progress Software OpenEdge version 11.2 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the selection parameter of the report/reportViewAction.jsp...