AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2002-0196

MEDIUM · CVSS 6.4 EPSS 1.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2002-05-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2002-0196
Severity
MEDIUM
CVSS
6.4
EPSS
1.57%

Original NVD Description

GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose path includes the web root.