CVE-2015-4068

Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFileServlet or (2) exportServlet servlet.

• CWE-22
• CWE-22

• https://documentation.arcserve.com/Arcserve-UDP/Available/V5/ENU/Bookshelf_Files/HTML/Update%204/UDP_Update4_ReleaseNotes.htmlRelease Notes, Vendor Advisory
• https://www.securityfocus.com/bid/74845Broken Link, Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-15-241/Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-15-242/Third Party Advisory, VDB Entry
• https://documentation.arcserve.com/Arcserve-UDP/Available/V5/ENU/Bookshelf_Files/HTML/Update%204/UDP_Update4_ReleaseNotes.htmlRelease Notes, Vendor Advisory
• https://www.securityfocus.com/bid/74845Broken Link, Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-15-241/Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-15-242/Third Party Advisory, VDB Entry
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-4068US Government Resource

Published

May 29, 2015

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4062SQL injection vulnerability in includes/nsp_search.php in th…
• CVE-2015-4063Cross-site scripting (XSS) vulnerability in includes/nsp_sea…
• CVE-2015-4064SQL injection vulnerability in modules/module.ab-testing.php…
• CVE-2015-4065Cross-site scripting (XSS) vulnerability in shared/shortcode…
• CVE-2015-4066Multiple SQL injection vulnerabilities in admin/handlers.php…
• CVE-2015-4067Integer overflow in the libnv6 module in Dell NetVault Backu…
• CVE-2015-4069The EdgeServiceImpl web service in Arcserve UDP before 5.0 U…
• CVE-2015-4070Open redirect vulnerability in the proxyimages function in w…
• CVE-2015-4071The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remo…
• CVE-2015-4072Multiple cross-site scripting (XSS) vulnerabilities in the H…
• CVE-2015-4073Multiple SQL injection vulnerabilities in the Helpdesk Pro p…
• CVE-2015-4074Directory traversal vulnerability in the Helpdesk Pro plugin…