CVE Catalog

CVE-2022-23347

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
11.99%

96th percentile - higher than 96% of all known CVEs

Summary

BigAnt Server version 5.6.06 is vulnerable to directory traversal attacks, allowing an attacker to read files outside the server's root directory.

Risk Assessment

An attacker can gain unauthorized access to sensitive system files, such as configurations or user data, leading to information disclosure.

Recommendation

Immediately update BigAnt Server to the latest version that fixes this vulnerability and restrict server access to trusted networks only.

Original NVD description (English source)

BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS