CWE-22 · File and Path Handling
Path Traversal
10,485CVEs
85exploited
549with a public check
524likely (EPSS 10%+)
SortMost likely exploited
10,485 CVEs with CWE-22 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-32315In CISA KEVExploitedOpenfire Administration Console - Authentication Bypassigniterealtime · Openfire · CVSS 8.6 · 2023-05-26 | 8.6 | 100% | 2023-05-26 |
| CVE-2022-29464In CISA KEVExploitedWSO2 Management - Arbitrary File Upload & Remote Code ExecutionWSO2 · Multiple Products · CVSS 9.8 · 2022-04-18 | 9.8 | 100% | 2022-04-18 |
| CVE-2021-26086In CISA KEVExploitedAtlassian Jira Limited - Local File InclusionAtlassian · Jira Server · CVSS 5.3 · 2021-08-16 | 5.3 | 100% | 2021-08-16 |
| CVE-2021-22005In CISA KEVExploitedVMware vCenter Server - Arbitrary File UploadVMware · VMware vCenter Server, VMware Cloud Foundation · CVSS 9.8 · 2021-09-23 | 9.8 | 100% | 2021-09-23 |
| CVE-2020-5902In CISA KEVExploitedF5 BIG-IP TMUI - Remote Code ExecutionF5 · BIG-IP · CVSS 9.8 · 2020-07-01 | 9.8 | 100% | 2020-07-01 |
| CVE-2019-19781In CISA KEVExploitedCitrix ADC and Gateway - Directory TraversalCitrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance · CVSS 9.8 · 2019-12-27 | 9.8 | 100% | 2019-12-27 |
| CVE-2019-11510In CISA KEVExploitedPulse Connect Secure SSL VPN Arbitrary File ReadIvanti · Pulse Connect Secure · CVSS 9.9 · 2019-05-08 | 9.9 | 100% | 2019-05-08 |
| CVE-2018-13379In CISA KEVExploitedFortinet FortiOS - Credentials DisclosureFortinet · Fortinet FortiOS, FortiProxy · CVSS 9.1 · 2019-06-04 | 9.1 | 100% | 2019-06-04 |
| CVE-2021-41773In CISA KEVExploitedApache 2.4.49 - Path Traversal and Remote Code ExecutionApache Software Foundation · Apache HTTP Server · CVSS 7.5 · 2021-10-05 | 7.5 | 100% | 2021-10-05 |
| CVE-2021-20090In CISA KEVExploitedBuffalo WSR-2533DHPL2 - Path TraversalArcadyan · Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3 · CVSS 9.8 · 2021-04-29 | 9.8 | 100% | 2021-04-29 |
| CVE-2021-42013In CISA KEVExploitedApache 2.4.49/2.4.50 - Path Traversal and Remote Code ExecutionApache Software Foundation · Apache HTTP Server · CVSS 9.8 · 2021-10-07 | 9.8 | 100% | 2021-10-07 |
| CVE-2024-32113In CISA KEVExploitedApache OFBiz Directory Traversal - Remote Code ExecutionApache Software Foundation · Apache OFBiz · CVSS 9.1 · 2024-05-08 | 9.1 | 100% | 2024-05-08 |
| CVE-2019-3396In CISA KEVExploitedAtlassian Confluence Server - Path TraversalAtlassian · Confluence Server · CVSS 9.8 · 2019-03-25 | 9.8 | 100% | 2019-03-25 |
| CVE-2021-27065In CISA KEVExploitedMicrosoft Exchange Server Remote Code Execution VulnerabilityMicrosoft · Microsoft Exchange Server 2013 Cumulative Update 21 · CVSS 7.8 · 2021-03-02 | 7.8 | 100% | 2021-03-02 |
| CVE-2021-21972In CISA KEVExploitedVMware vSphere Client (HTML5) - Remote Code ExecutionVMware · VMware vCenter Server · CVSS 9.8 · 2021-02-24 | 9.8 | 100% | 2021-02-24 |
| CVE-2010-2861In CISA KEVExploitedAdobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFIAdobe · ColdFusion · CVSS 7.5 · 2010-08-11 | 7.5 | 100% | 2010-08-11 |
| CVE-2024-28995In CISA KEVExploitedSolarWinds Serv-U - Directory TraversalSolarWinds · SolarWinds Serv-U · CVSS 8.6 · 2024-06-06 | 8.6 | 100% | 2024-06-06 |
| CVE-2024-4885In CISA KEVExploitedProgress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code ExecutionProgress Software Corporation · WhatsUp Gold · CVSS 9.8 · 2024-06-25 | 9.8 | 99% | 2024-06-25 |
| CVE-2019-16278In CISA KEVExploitednostromo 1.9.6 - Remote Code ExecutionNostromo · nhttpd · CVSS 9.8 · 2019-10-14 | 9.8 | 99% | 2019-10-14 |
| CVE-2023-47246In CISA KEVExploitedSysAid Server - Remote Code ExecutionSysAid · SysAid Server · CVSS 9.8 · 2023-11-10 | 9.8 | 99% | 2023-11-10 |
| CVE-2022-27925In CISA KEVExploitedZimbra Collaboration Suite 8.8.15/9.0 - Zip Path TraversalSynacor · Zimbra Collaboration Suite (ZCS) · CVSS 7.2 · 2022-04-20 | 7.2 | 99% | 2022-04-20 |
| CVE-2024-8963In CISA KEVExploitedIvanti Cloud Services Appliance - Path TraversalIvanti · CSA (Cloud Services Appliance) · CVSS 9.4 · 2024-09-19 | 9.4 | 99% | 2024-09-19 |
| CVE-2019-5418In CISA KEVExploitedRails File Content DisclosureRails · https://github.com/rails/rails · CVSS 7.5 · 2019-03-27 | 7.5 | 99% | 2019-03-27 |
| CVE-2021-40444In CISA KEVExploitedMicrosoft MSHTML Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 8.8 · 2021-09-15 | 8.8 | 98% | 2021-09-15 |
| CVE-2020-11738In CISA KEVExploitedWordPress Duplicator 1.3.24 & 1.3.26 - Local File InclusionWordPress · Snap Creek Duplicator Plugin · CVSS 7.5 · 2020-04-13 | 7.5 | 98% | 2020-04-13 |
| CVE-2025-34028In CISA KEVExploitedCommvault - SSRF via /commandcenter/deployWebpackage.doCommvault · Command Center Innovation Release · CVSS 9.3 · 2025-04-22 | 9.3 | 98% | 2025-04-22 |
| CVE-2026-85706In CISA KEVExploitedGitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File ReadGitLab · GitLab · CVSS 10 · 2026-09-12 | 10.0 | 97% | 2026-09-12 |
| CVE-2020-14864In CISA KEVExploitedOracle Fusion - Directory Traversal/Local File InclusionOracle Corporation · Business Intelligence Enterprise Edition · CVSS 7.5 · 2020-10-21 | 7.5 | 97% | 2020-10-21 |
| CVE-2024-41713In CISA KEVExploitedMitel MiCollab - Authentication BypassMitel · MiCollab · CVSS 9.1 · 2024-10-21 | 9.1 | 97% | 2024-10-21 |
| CVE-2019-3398In CISA KEVExploitedAtlassian Confluence Download Attachments - Remote Code ExecutionAtlassian · Confluence · CVSS 8.8 · 2019-04-18 | 8.8 | 97% | 2019-04-18 |
| CVE-2024-57727In CISA KEVExploitedSimpleHelp <= 5.5.7 - Unauthenticated Path TraversalSimpleHelp · SimpleHelp · CVSS 9.1 · 2025-01-15 | 9.1 | 97% | 2025-01-15 |
| CVE-2019-20085In CISA KEVExploitedTVT NVMS 1000 - Local File InclusionTVT · NVMS-1000 · CVSS 7.5 · 2019-12-30 | 7.5 | 96% | 2019-12-30 |
| CVE-2018-14847In CISA KEVExploitedMikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory trave…MikroTik · RouterOS · CVSS 9.1 · 2018-08-02 | 9.1 | 96% | 2018-08-02 |
| CVE-2021-20124In CISA KEVExploitedDraytek VigorConnect 6.0-B3 - Local File InclusionDrayTek · Draytek VigorConnect · CVSS 7.5 · 2021-10-13 | 7.5 | 96% | 2021-10-13 |
| CVE-2016-0752In CISA KEVExploitedDirectory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remot…Rails · Ruby on Rails · CVSS 7.5 · 2016-02-16 | 7.5 | 96% | 2016-02-16 |
| CVE-2022-41352In CISA KEVExploitedZimbra Collaboration - Unrestricted File UploadSynacor · Zimbra Collaboration Suite (ZCS) · CVSS 9.8 · 2022-09-26 | 9.8 | 95% | 2022-09-26 |
| CVE-2024-1708In CISA KEVExploitedConnectWise ScreenConnect <= 23.9.7 - Path TraversalConnectWise · ScreenConnect · CVSS 8.4 · 2024-02-21 | 8.4 | 95% | 2024-02-21 |
| CVE-2017-12637In CISA KEVExploitedSAP NetWeaver Application Server Java 7.5 - Local File InclusionSAP · NetWeaver · CVSS 7.5 · 2017-08-07 | 7.5 | 95% | 2017-08-07 |
| CVE-2023-38950In CISA KEVExploitedZKTeco BioTime v8.5.5 - Path TraversalZKTeco · BioTime · CVSS 7.5 · 2023-08-03 | 7.5 | 92% | 2023-08-03 |
| CVE-2022-37042In CISA KEVExploitedZimbra Collaboration Suite 8.8.15/9.0 - Remote Code ExecutionSynacor · Zimbra Collaboration Suite (ZCS) · CVSS 9.8 · 2022-08-11 | 9.8 | 92% | 2022-08-11 |
| CVE-2024-7399In CISA KEVExploitedSamsung MagicINFO 9 Server 21.1050.0 - Remote Code ExecutionSamsung Electronics · MagicINFO 9 Server · CVSS 8.8 · 2024-08-09 | 8.8 | 92% | 2024-08-09 |
| CVE-2026-93616In CISA KEVExploitedCheck Point Security Management - Unauthenticated Directory Traversal to RCEcheckpoint · Quantum Security Management · CVSS 9.8 · 2026-09-22 | 9.8 | 92% | 2026-09-22 |
| CVE-2025-6218In CISA KEVExploitedRARLAB WinRAR Directory Traversal Remote Code Execution VulnerabilityRARLAB · WinRAR · CVSS 7.8 · 2025-06-21 | 7.8 | 90% | 2025-06-21 |
| CVE-2021-20123In CISA KEVExploitedDraytek VigorConnect 1.6.0-B - Local File InclusionDrayTek · Draytek VigorConnect · CVSS 7.5 · 2021-10-13 | 7.5 | 90% | 2021-10-13 |
| CVE-2019-7195In CISA KEVExploitedQNAP Photo Station - Path TraversalQNAP · QNAP NAS devices running Photo Station · CVSS 9.8 · 2019-12-05 | 9.8 | 89% | 2019-12-05 |
| CVE-2021-43798In CISA KEVExploitedGrafana v8.x - Arbitrary File Readgrafana · grafana · CVSS 7.5 · 2021-12-07 | 7.5 | 89% | 2021-12-07 |
| CVE-2020-11652In CISA KEVExploitedAn issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize p…SaltStack · Salt · CVSS 6.5 · 2020-04-30 | 6.5 | 86% | 2020-04-30 |
| CVE-2023-41266In CISA KEVExploitedQlik Sense Enterprise - Path TraversalQlik · Sense · CVSS 8.2 · 2023-08-29 | 8.2 | 85% | 2023-08-29 |
| CVE-2015-3035In CISA KEVExploitedTP-LINK - Local File InclusionTP-Link · Multiple Archer Devices · CVSS 7.5 · 2015-04-17 | 7.5 | 84% | 2015-04-17 |
| CVE-2024-0769In CISA KEVExploitedD-Link DIR-859 HTTP POST Request hedwig.cgi path traversalD-Link · DIR-859 · CVSS 5.3 · 2024-01-21 | 5.3 | 83% | 2024-01-21 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.