CVE-2006-4955

MEDIUM · CVSS 5 EPSS 7.88%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-09-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2006-4955

Severity

MEDIUM

CVSS

EPSS

7.88%

Java

Original NVD Description

Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the (1) savefolder and (2) savefilename parameters.