Skip to content

CVE-2011-1900

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0...

10.0 High

CVE-2011-1900 is a high vulnerability (CVSS 10.0) in Indusoft Web Studio, published May 4, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 32.0%, the 98th percentile. No source names a fixed version.

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request.

Exploit likelihood

32.0%Down 14.6 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request.

Record: CVE-2011-1900
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-22
Updated: 2026-11-02

CVE List No score

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request.

Record: CVE-2011-1900
Updated: 2026-11-02

EUVDEUVD-2011-1898 No score

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request.

Record: EUVD-2011-1898
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3gf4-rwmr-gpjh No score

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0...

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request.

Record: GHSA-3gf4-rwmr-gpjh
Weakness: CWE-22
Updated: 2026-11-02

Affected products

indusoft web studio

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Metasploit	Indusoft WebStudio NTWebServer Remote File Access

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, Metasploit, NVD

References