File and Path Handling

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. TRUfusion Enterprise <= 7.10.4.0 - Path TraversalCVE-2025-27222Rocketsoftware · CVSS 8.6 · 2.0% likely

   CWE-35

2. Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to (1) create arbitrary files via a .. (do…CVE-2014-3914Rocketsoftware · 73% likely

   CWE-22

3. An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to execute arbitrary code via a crafted JSP file. Issue fixed…CVE-2022-36431Rocketsoftware · CVSS 9.8 · 1.2% likely

   CWE-434

4. Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated users to be able to upload files. However, the applicat…CVE-2025-59793Rocketsoftware · CVSS 9.9 · 1.2% likely

   CWE-35

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.