CWE-23 · File and Path Handling
Relative Path Traversal
548CVEs
6exploited
16with a public check
19likely (EPSS 10%+)
SortMost likely exploited
548 CVEs with CWE-23 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-27199In CISA KEVExploitedTeamCity < 2023.11.4 - Authentication BypassJetBrains · TeamCity · CVSS 7.3 · 2024-03-04 | 7.3 | 100% | 2024-03-04 |
| CVE-2020-5410In CISA KEVExploitedSpring Cloud Config Server - Local File InclusionSpring by VMware · Spring Cloud Config · CVSS 7.5 · 2020-06-02 | 7.5 | 96% | 2020-06-02 |
| CVE-2021-40870In CISA KEVExploitedAviatrix Controller 6.x before 6.5-1804.1922 - Remote Command ExecutionAviatrix · Aviatrix Controller · CVSS 9.8 · 2021-09-13 | 9.8 | 93% | 2021-09-13 |
| CVE-2025-64446In CISA KEVExploitedFortiWeb - Authentication BypassFortinet · FortiWeb · CVSS 9.4 · 2025-11-14 | 9.4 | 91% | 2025-11-14 |
| CVE-2026-34926In CISA KEVExploitedA directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code…Trend Micro, Inc. · TrendAI Apex One · CVSS 6.7 · 2026-05-21 | 6.7 | 13% | 2026-05-21 |
| CVE-2026-76519In CISA KEVExploitedCisco Secure Email Gateway Arbitrary File Write VulnerabilityCisco · Cisco Secure Email · CVSS 9.8 · 2026-10-14 | 9.8 | 6.2% | 2026-10-14 |
| CVE-2020-5405CheckSpring Cloud Config - Local File InclusionSpring by VMware · Spring Cloud Config · 2020-03-05 | – | 69% | 2020-03-05 |
| CVE-2022-23854CheckAVEVA InTouch Access Anywhere Secure Gateway - Local File InclusionAVEVA · InTouch Access Anywhere · CVSS 7.5 · 2022-12-23 | 7.5 | 50% | 2022-12-23 |
| CVE-2020-17518CheckApache Flink 1.5.1 - Local File InclusionApache Software Foundation · Apache Flink · 2021-01-05 | – | 49% | 2021-01-05 |
| CVE-2020-5284CheckNext.js <9.3.2 - Local File Inclusionzeit · next.js · CVSS 4.4 · 2020-03-30 | 4.4 | 45% | 2020-03-30 |
| CVE-2024-2053CheckArtica Proxy - Unauthenticated LFIArtica Tech · Artica Proxy · CVSS 7.5 · 2024-03-05 | 7.5 | 45% | 2024-03-05 |
| CVE-2023-34990CheckFortiWLM - Directory TraversalFortinet · FortiWLM · CVSS 9.6 · 2024-12-18 | 9.6 | 25% | 2024-12-18 |
| CVE-2026-41948CheckDify <=1.14.1 - Unauthenticated Plugin Daemon Path Traversallanggenius · dify · CVSS 9.4 · 2026-05-18 | 9.4 | 23% | 2026-05-18 |
| CVE-2023-6825CheckWordPress File Manager <= 7.2.1 - Directory Traversalmndpsingh287 · File Manager · CVSS 9.9 · 2024-03-13 | 9.9 | 6.0% | 2024-03-13 |
| CVE-2025-47445CheckWordPress Eventin (Themewinter) ≤ 4.0.26 - Arbitrary File DownloadArraytics · Eventin · CVSS 7.5 · 2025-05-14 | 7.5 | 5.2% | 2025-05-14 |
| CVE-2023-2356CheckMlflow <2.3.0 - Local File Inclusionmlflow · mlflow/mlflow · CVSS 10 · 2023-04-28 | 10.0 | 4.1% | 2023-04-28 |
| CVE-2026-54066CheckSiYuan <= 3.6.5 - Unauthenticated Path Traversalsiyuan-note · siyuan · CVSS 7.5 · 2026-06-24 | 7.5 | 2.2% | 2026-06-24 |
| CVE-2026-31831CheckTautulli <= 2.16.1 - Path TraversalTautulli · Tautulli · CVSS 8.7 · 2026-03-30 | 8.7 | 2.0% | 2026-03-30 |
| CVE-2025-55748CheckXWiki Platform - Path Traversalxwiki · xwiki-platform · CVSS 9.3 · 2025-09-03 | 9.3 | 1.8% | 2025-09-03 |
| CVE-2025-55747CheckXWiki Platform - Information Disclosurexwiki · xwiki-platform · CVSS 9.3 · 2025-09-03 | 9.3 | 1.8% | 2025-09-03 |
| CVE-2025-52207CheckMikoPBX - Unrestricted File UploadMIKO · MikoPBX · CVSS 9.9 · 2025-06-27 | 9.9 | 1.7% | 2025-06-27 |
| CVE-2025-59341Checkesm.sh <= v136 - Local File Inclusionesm-dev · esm.sh · CVSS 7.7 · 2025-09-17 | 7.7 | 1.6% | 2025-09-17 |
| CVE-2025-55752Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabledApache Software Foundation · Apache Tomcat · CVSS 7.5 · 2025-10-27 | 7.5 | 64% | 2025-10-27 |
| CVE-2024-52012Apache Solr: Configset upload on Windows allows arbitrary path write-accessApache Software Foundation · Apache Solr · CVSS 5.4 · 2025-01-27 | 5.4 | 47% | 2025-01-27 |
| CVE-2018-18990LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose se…ICS-CERT · LCDS Laquis SCADA · 2019-02-05 | – | 39% | 2019-02-05 |
| CVE-2021-43555mySCADA myDESIGNERmySCADA · myDESIGNER · CVSS 7.3 · 2021-11-19 | 7.3 | 38% | 2021-11-19 |
| CVE-2022-29844Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftpWestern Digital · My Cloud · CVSS 6.7 · 2023-01-25 | 6.7 | 36% | 2023-01-25 |
| CVE-2024-47949In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary locationJetBrains · TeamCity · CVSS 4.9 · 2024-10-08 | 4.9 | 32% | 2024-10-08 |
| CVE-2024-24942In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archivesJetBrains · TeamCity · CVSS 5.3 · 2024-02-06 | 5.3 | 32% | 2024-02-06 |
| CVE-2025-34510Sitecore XM, XC, and XP Post-Auth RCE via Zip SlipSitecore · Experience Manager · CVSS 8.8 · 2025-06-17 | 8.8 | 26% | 2025-06-17 |
| CVE-2021-20040A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user. This vulnera…SonicWall · SonicWall SMA100 · 2021-12-08 | – | 25% | 2021-12-08 |
| CVE-2024-43454Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityMicrosoft · Windows Server 2008 Service Pack 2 · CVSS 7.1 · 2024-09-10 | 7.1 | 22% | 2024-09-10 |
| CVE-2025-68472MindsDB has improper sanitation of filepath that leads to information disclosure and DOSmindsdb · mindsdb · CVSS 8.1 · 2026-01-12 | 8.1 | 20% | 2026-01-12 |
| CVE-2026-23734XWiki Platform: Path traversal via resources parameter in ssx and jsx endpoints when using leading slashxwiki · xwiki-commons · CVSS 9.3 · 2026-05-20 | 9.3 | 19% | 2026-05-20 |
| CVE-2022-2139Advantech iViewAdvantech iView · iView · CVSS 6.5 · 2022-07-22 | 6.5 | 16% | 2022-07-22 |
| CVE-2022-1661Keysight N6854A Geolocation server and N6841A RF Sensor softwareKeysight · N6854A Geolocation server and N6841A RF Sensor software · CVSS 7.5 · 2022-05-31 | 7.5 | 16% | 2022-05-31 |
| CVE-2025-59456In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive uploadJetBrains · TeamCity · CVSS 5.5 · 2025-09-17 | 5.5 | 15% | 2025-09-17 |
| CVE-2020-10619An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control.Advantech · WebAccess/NMS · 2020-04-09 | – | 14% | 2020-04-09 |
| CVE-2022-1373Softing Secure Integration Server Relative Path TraversalSofting · Secure Integration Server · CVSS 7.2 · 2022-08-17 | 7.2 | 13% | 2022-08-17 |
| CVE-2025-53609A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through 7.2.11, 7.0.2 through 7.0.11 may allow an authenticated attack…Fortinet · FortiWeb · CVSS 4.7 · 2025-09-09 | 4.7 | 12% | 2025-09-09 |
| CVE-2020-8271Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8Citrix · Citrix SD-WAN Center · 2020-11-16 | – | 11% | 2020-11-16 |
| CVE-2023-35359Windows Kernel Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2023-08-08 | 7.8 | 9.9% | 2023-08-08 |
| CVE-2024-24578RaspberryMatic Unauthenticated Remote Code Execution vulnerability through HMServer File Uploadjens-maus · RaspberryMatic · CVSS 10 · 2024-03-18 | 10.0 | 8.7% | 2024-03-18 |
| CVE-2020-5280Local file inclusion vulnerability in http4shttp4s · http4s · CVSS 7.6 · 2020-03-25 | 7.6 | 7.0% | 2020-03-25 |
| CVE-2020-8865This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webmail Edition 5.2.22. Authentication is required to exploit th…Horde · Groupware Webmail Edition · CVSS 6.3 · 2020-03-23 | 6.3 | 6.8% | 2020-03-23 |
| CVE-2020-25176Rockwell Automation ISaGRAF5 Runtime Relative Path TraversalRockwell Automation · ISaGRAF Runtime · CVSS 9.1 · 2022-03-18 | 9.1 | 6.4% | 2022-03-18 |
| CVE-2012-5972SpecView Directory TraversalSpecView · SpecView · CVSS 2.6 · 2013-01-17 | 2.6 | 5.0% | 2013-01-17 |
| CVE-2026-5422Path Traversal in jupyter/jupyterjupyter · jupyter/jupyter · CVSS 6.8 · 2026-06-02 | 6.8 | 4.9% | 2026-06-02 |
| CVE-2024-38258Windows Remote Desktop Licensing Service Information Disclosure VulnerabilityMicrosoft · Windows Server 2008 Service Pack 2 · CVSS 6.5 · 2024-09-10 | 6.5 | 4.7% | 2024-09-10 |
| CVE-2017-0918Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution.GitLab · GitLab Community and Enterprise Editions · 2018-03-21 | – | 4.3% | 2018-03-21 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.