CVE-2008-3685

high · 10

Directory traversal vulnerability in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to TCP port 2606.

CVSS

12.9%

EPSS (exploit prob.)

96th

EPSS percentile

2009-10-22

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
emc	documentum_applicationxtender_workflow_manager	<= 5.40

Check a specific version with /api/v1/cve/match.

References

http://secunia.com/advisories/37070
http://www.zerodayinitiative.com/advisories/ZDI-08-095/
http://secunia.com/advisories/37070
http://www.zerodayinitiative.com/advisories/ZDI-08-095/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-3685