CVE-2016-3972

LOW · CVSS 2.7 EPSS 1.47%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-04-18 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-3972

Severity

LOW

CVSS

2.7

EPSS

1.47%

Original Filing — NVD Description

Directory traversal vulnerability in the dotTailLogServlet in dotCMS before 3.5.1 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the fileName parameter.