CVE Vulnerability Advisory Database

[Affected Scope] Check Point Management Server (R80.x, R81.x series)

[Impact] Unauthenticated attackers can upload and execute arbitrary scripts via directory traversal, leading to full system compromise.

[Mitigation] Apply the vendor-provided emergency hotfix and restrict management interface access from the public internet.

[Affected Scope] Systems running VMware vCenter Server with the built-in Syslog server service enabled.

[Impact] A remote, unauthenticated attacker with network access can exploit this directory traversal vulnerability to execute arbitrary code and fully compromise the vCenter Server.

[Mitigation] Immediately apply the official security patches provided by Broadcom and restrict network access to Syslog ports (UDP/TCP 514).

[Affected Scope] Zyxel ATP, USG FLEX, USG FLEX 50(W), and USG20(W)-VPN series running firmware versions V5.00 through V5.38

[Impact] Unauthenticated remote attackers can download or upload arbitrary files via crafted URLs, potentially leading to full system compromise and remote code execution

[Mitigation] Immediately upgrade to firmware version V5.39 or later, and restrict external access to the web management interface

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0

[Impact] Unauthenticated attackers can bypass authentication, upload malicious ZIP archives, and exploit directory traversal to write arbitrary files, leading to Remote Code Execution (RCE)

[Mitigation] Immediately apply the official Zimbra security patches and restrict external access to the mboximport endpoint

[Affected Scope] dotCMS versions 3.0 through 22.02

[Impact] Unauthenticated attackers can upload malicious JSP files via directory traversal when anonymous content creation is enabled, leading to full Remote Code Execution (RCE)

[Mitigation] Immediately upgrade to patched dotCMS versions (22.03 or higher) and disable anonymous content creation APIs if not required

[Affected Scope] WSO2 API Manager (2.2.0 to 4.0.0), Identity Server (5.2.0 to 5.11.0), Enterprise Integrator (6.2.0 to 6.6.0), and other major WSO2 products

[Impact] Unauthenticated attackers can upload and execute arbitrary JSP files via a crafted HTTP request, leading to complete system compromise

[Mitigation] Apply official WSO2 security patches immediately, restrict external access to the '/fileupload' endpoint, and disable execution permissions in web root subdirectories

[Affected Scope] Aviatrix Controller 6.x versions prior to 6.5-1804.1922

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by exploiting directory traversal and unrestricted file upload vulnerabilities

[Mitigation] Immediately upgrade Aviatrix Controller to version 6.5-1804.1922 or later, and restrict external access to the management interface

[Affected Scope] ONLYOFFICE Document Server versions prior to 5.6.3 (when JWT is enabled)

[Impact] Attackers can achieve Remote Code Execution (RCE) by uploading malicious files to arbitrary directories.

[Mitigation] Immediately update ONLYOFFICE Document Server to version 5.6.3 or later.

[Affected Scope] Traffic Management User Interface (TMUI), also known as the Configuration utility, in F5 BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1

[Impact] Unauthenticated remote attackers can exploit directory traversal to read arbitrary system files or execute remote commands with administrative privileges, leading to complete system compromise

[Mitigation] Immediately upgrade to the patched versions provided by F5, or apply temporary workarounds to restrict external access to the TMUI management interface

[Affected Scope] Citrix Application Delivery Controller (ADC) and Gateway versions 10.5, 11.1, 12.0, 12.1, and 13.0

[Impact] Unauthenticated remote attackers can exploit directory traversal to execute arbitrary code and gain full control of the target system

[Mitigation] Immediately apply official Citrix security patches, or implement temporary HTTP/HTTPS request blocking policies (Responder Policies) prior to patching

[Affected Scope] Nostromo nhttpd web server versions 1.9.6 and prior

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with the privileges of the web server process via crafted HTTP requests

[Mitigation] Immediately upgrade to the patched version (1.9.7 or later), or restrict web server execution privileges and block anomalous directory traversal paths

[Affected Scope] MikroTik RouterOS versions 6.29 through 6.42 with the WinBox interface enabled

[Impact] Unauthenticated remote attackers can read arbitrary system files (including user credentials), and authenticated attackers can write arbitrary files, leading to complete device compromise

[Mitigation] Immediately upgrade RouterOS to patched versions (6.40.9, 6.42.1 or higher) and restrict or disable external WinBox port (8291) access

[Affected Scope] Arcserve UDP versions prior to 5.0 Update 4

[Impact] Unauthenticated remote attackers can retrieve sensitive system files or trigger a denial of service, severely impacting business continuity

[Mitigation] Immediately upgrade to Arcserve UDP 5.0 Update 4 or later, and restrict external access to the management console

[Affected Scope] NTWebServer component in InduSoft Web Studio versions prior to 7.1 SP2 Patch 4

[Impact] Unauthenticated remote attackers can exploit directory traversal to read administrative passwords in APP files, leading to arbitrary remote code execution (RCE)

[Mitigation] Upgrade InduSoft Web Studio to version 7.1 SP2 Patch 4 or later, and restrict external access to the NTWebServer port

[Affected Scope] Adobe ColdFusion 9.0.1 and earlier versions containing the CFIDE/administrator console

[Impact] Unauthenticated remote attackers can exploit directory traversal to read arbitrary system and configuration files, potentially retrieving administrator password hashes and fully compromising the server

[Mitigation] Apply the official APSB10-18 security patch, restrict external access to the CFIDE directory, or upgrade to a supported secure version