CWE-37 · File and Path Handling
Path Traversal: '/absolute/pathname/here'
6CVEs
SortMost likely exploited
6 CVEs with CWE-37 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-25347Delta Electronics DIAEnergie Path TraversalDelta Electronics · DIAEnergie · CVSS 9.8 · 2022-03-29 | 9.8 | 11% | 2022-03-29 |
| CVE-2022-20962A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to make unauthorized changes to the file…Cisco · Cisco Identity Services Engine Software · CVSS 3.8 · 2022-11-03 | 3.8 | 1.1% | 2022-11-03 |
| CVE-2023-20087Cisco Identity Services Engine Arbitrary File Download VulnerabilitiesCisco · Cisco Identity Services Engine Software · CVSS 4.9 · 2023-05-18 | 4.9 | 0.8% | 2023-05-18 |
| CVE-2023-20077Cisco Identity Services Engine Arbitrary File Download VulnerabilitiesCisco · Cisco Identity Services Engine Software · CVSS 4.9 · 2023-05-18 | 4.9 | 0.8% | 2023-05-18 |
| CVE-2024-12806A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.SonicWall · SonicOS · CVSS 4.9 · 2025-01-09 | 4.9 | 0.7% | 2025-01-09 |
| CVE-2018-10498This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. An attacker must first obtain…Samsung · Samsung Email · 2018-09-24 | – | 0.4% | 2018-09-24 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.