CWE-37 · 6 records
Path Traversal: '/absolute/pathname/here'
CVEs in this class
6 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2022-20962No exploit | A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker tocisco · identity services engine · CWE-37 | High8.8 | — | 1.0% | Nov 4, 2022 |
33Monitor | CVE-2022-25347No exploit | Delta Electronics DIAEnergie Path Traversaldeltaww · diaenergie · CWE-37 | High7.5 | — | 11.3% | Mar 29, 2022 |
26Monitor | CVE-2023-20087No exploit | Cisco Identity Services Engine Arbitrary File Download Vulnerabilitiescisco · identity services engine · CWE-37 | Medium6.5 | — | 0.8% | May 17, 2023 |
26Monitor | CVE-2023-20077No exploit | Cisco Identity Services Engine Arbitrary File Download Vulnerabilitiescisco · identity services engine · CWE-37 | Medium6.5 | — | 0.8% | May 17, 2023 |
22Monitor | CVE-2018-10498No exploit | This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Samsung Email Fixed in version 5.samsung · samsung email · CWE-37 | Medium5.5 | — | 0.3% | Sep 24, 2018 |
19Monitor | CVE-2024-12806No exploit | A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.sonicwall · sonicos · CWE-37 | Medium4.9 | — | 0.6% | Jan 9, 2025 |
- CVE-2022-2096235Monitor
A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to
HighCVSS 8.8No exploitEPSS 1%cisco · identity services engineNov 4, 2022
- CVE-2022-2534733Monitor
Delta Electronics DIAEnergie Path Traversal
HighCVSS 7.5No exploitEPSS 11%deltaww · diaenergieMar 29, 2022
- CVE-2023-2008726Monitor
Cisco Identity Services Engine Arbitrary File Download Vulnerabilities
MediumCVSS 6.5No exploitEPSS 0%cisco · identity services engineMay 17, 2023
- CVE-2023-2007726Monitor
Cisco Identity Services Engine Arbitrary File Download Vulnerabilities
MediumCVSS 6.5No exploitEPSS 0%cisco · identity services engineMay 17, 2023
- CVE-2018-1049822Monitor
This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Samsung Email Fixed in version 5.
MediumCVSS 5.5No exploitEPSS 0%samsung · samsung emailSep 24, 2018
- CVE-2024-1280619Monitor
A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.
MediumCVSS 4.9No exploitEPSS 0%sonicwall · sonicosJan 9, 2025