CVE-2014-9373

Currently unrated 🤨

Key Information

Vendor
Manageengine
Status
Netflow Analyzer
Vendor
CVE Published:
16 December 2014

Summary

Directory traversal vulnerability in the CollectorConfInfoServlet servlet in ManageEngine NetFlow Analyzer allows remote attackers to execute arbitrary code via a .. (dot dot) in the filename.

Refferences

http://www.zerodayinitiative.com/advisories/ZDI-14-422/
x_refsource_MISC

EPSS Score

17% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.