CVE-2013-2641
Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows...
Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter.
- Record
CVE-2013-2641- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter.
- Record
CVE-2013-2641- Updated
- 2026-11-02
EUVDEUVD-2013-2580 No score
Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter.
- Record
EUVD-2013-2580- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cq75-p624-6wj3 No score
Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows...
Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter.
- Record
GHSA-cq75-p624-6wj3- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities | 2013-04-08 |
| Metasploit | Sophos Web Protection Appliance patience.cgi Directory Traversal | 2013-04-03 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2641 is a medium vulnerability (CVSS 5.0) in Sophos Web Appliance, published March 18, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 71.0%, the 99th percentile. No source names a fixed version.