CyberRota
Live Feed
Return to register
Case File

CVE-2012-4940

MEDIUM · CVSS 6.4 EPSS 83.63%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-10-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2012-4940
Severity
MEDIUM
CVSS
6.4
EPSS
83.63%

Original Filing — NVD Description

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName parameter in a download action to source/loggin/page_log_dwn_file.hsp, or the fileName parameter in (2) an edit action or (3) a delete action to the default URI.