CVE-2016-3972

2.7 lowEPSS 1.5%

Low (2.7) in dotcms dotcms. EPSS 1.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the dotTailLogServlet in dotCMS before 3.5.1 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the fileName parameter.

Severity

CVSS 3.0

2.7 low

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2016-04-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dotcms:dotcms

References

http://dotcms.com/security/SI-34
http://seclists.org/fulldisclosure/2016/Apr/36
http://dotcms.com/security/SI-34
http://seclists.org/fulldisclosure/2016/Apr/36

Check your stack JSON