AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-0284

HIGH · CVSS 10 EPSS 6.38%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-06-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2010-0284
Severity
HIGH
CVSS
10
EPSS
6.38%
Windows

Original NVD Description

Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console (aka Access Management Console) in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows remote attackers to create arbitrary files with any contents, and consequently execute arbitrary code, via a .. (dot dot) in a parameter, aka ZDI-CAN-678.