Directory Traversal

🗓️ 06 Apr 2018 01:47:14Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 56 Views

Improper sanitization allows directory traversal on Window

Reporter	Title	Published	Views	Family All 158
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.	9 Sep 202607:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in hoek, Bouncy Castle Inc, Spring Framework, golang, Apache Commons, semver and Google Guava might affect IBM Storage Defender Copy Data Management	10 Apr 202614:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	12 Jan 202114:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Spring	23 Oct 202615:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Core affect watsonx.data	10 Feb 202510:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities fixed in 9.7.2.7	24 Oct 202411:46	–	ibm
Atlassian	Insecure version of Spring Web MVC used in Confluence Analytics	19 Feb 202022:31	–	atlassian

Vulners

Node

spring-webmvc spring-webmvcRange5.0.0.RELEASE–5.0.4.RELEASEjava

spring-webmvc spring-webmvcRange4.0.0.RELEASE–4.3.14.RELEASEjava

spring-webmvc spring-webmvcRange3.0.4.RELEASE–3.2.18.RELEASEjava

spring-webflux spring-webfluxRange5.0.0.RELEASE–5.0.4.RELEASEjava

Source	Link
pivotal	www.pivotal.io/security/cve-2018-1271
jira	www.jira.spring.io/browse/SPR-16616
securityfocus	www.securityfocus.com/bid/103699
oracle	www.oracle.com/security-alerts/cpujul2020.html
oracle	www.oracle.com/security-alerts/cpuoct2021.html
oracle	www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
oracle	www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
oracle	www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
access	www.access.redhat.com/errata/RHSA-2018:1320

23 Jun 2022 18:19Current

7.2High risk

Vulners AI Score7.2

CVSS 24.3

CVSS 3.15.9

EPSS0.30338