Skip to content

Ca · weakness class

File and Path Handling

8 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
3

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

  1. Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to exe…CVE-2008-4397Ca · 81% likely

    CWE-22

  2. Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via direct…CVE-2008-2241Ca · 12% likely

    CWE-22

  3. Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka UmxEventCliLib) ActiveX control in UmxEventCli.dll in CA Internet Security Suite 2008 allows remote…CVE-2008-2511Ca · 10% likely

    CWE-22

  4. Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) 8.4 SP1 and earlier and CA Unified Infrastructure Manageme…CVE-2016-9164Ca · 5.4% likely

    CWE-22

  5. Multiple directory traversal vulnerabilities in CA ERwin Web Portal 9.5 allow remote attackers to obtain sensitive information, bypass intended access restrictions, cause a denial…CVE-2014-2210Ca · 5.2% likely

    CWE-22

  6. Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to uploa…CVE-2007-5005Ca · 5.2% likely

    CWE-22

  7. An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Management software uses external input to construct a pathnam…CVE-2016-5803Ca Technologies · 2.3% likely

    CWE-22

  8. CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. To exploit the vulnerability, the ehealth user…CVE-2021-28249Ca · 0.4% likely

    CWE-426

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.