Vulnerability Database

308,926

Total vulnerabilities in the database

CVE-2015-4068

Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFileServlet or (2) exportServlet servlet.

  • Published: May 29, 2015
  • Updated: Nov 9, 2025
  • CVE: CVE-2015-4068
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.1
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CVSS v2:

  • Severity: High
  • Score: 9.4
  • AV:N/AC:L/Au:N/C:C/I:N/A:C

CWEs:

OWASP TOP 10:

Software From Fixed in
arcserve / udp - 5.0
arcserve / udp 5.0 5.0.x