CVE-2009-4645

VendoraccellionProductsecure file transfer applianceDiscoveredFeb 19, 2010UpdatedApr 29, 2026

Directory traversal vulnerability in web_client_user_guide.html in Accellion Secure File Transfer Appliance before 8_0_105 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter.

View graph Watch Export

CVSS v3.1

—

EPSS

2.76%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

Connections

2 relationships

CWE-22

source

Timeline

disclosure → media coverage

Feb 19, 2010

Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026