CVE Database · CVE-2016-1593
CVSS v3.1
N/A
EPSS
64.14%
Published
Apr 22, 2016
Modified
May 6, 2026
Public PoC / Exploit (3)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. (dot dot) in a filename within a multipart/form-data POST request to a LiveTime.woa URL.
Weaknesses (CWE)
Affected Products (1)
References (16)