CVE-2013-2641
sophos: no CVSS score yet. EPSS 71% chance of exploitation in the next 30 days.
Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter.
- EPSS
- 71% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sophos:web_appliance
- sophos:web_appliance_firmware
References
- http://www.sophos.com/en-us/support/knowledgebase/118969.aspx
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130403-0_Sophos_Web_Protection_Appliance_Multiple_Vulnerabilities.txt
- http://www.sophos.com/en-us/support/knowledgebase/118969.aspx
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130403-0_Sophos_Web_Protection_Appliance_Multiple_Vulnerabilities.txt