CVE-2014-5446
zohocorp: no CVSS score yet. EPSS 55% chance of exploitation in the next 30 days.
Directory traversal vulnerability in the DisplayChartPDF servlet in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allows remote attackers and remote authenticated users to read arbitrary files via a .. (dot dot) in the filename parameter.
- EPSS
- 55% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zohocorp:manageengine_it360
- zohocorp:manageengine_netflow_analyzer
References
- http://packetstormsecurity.com/files/129336/ManageEngine-Netflow-Analyzer-IT360-File-Download.html
- http://seclists.org/fulldisclosure/2014/Dec/9
- http://www.securityfocus.com/archive/1/534122/100/0/threaded
- http://www.securityfocus.com/archive/1/534141/100/0/threaded
- http://www.securityfocus.com/bid/71404