{"id":"CVE-2011-5127","aliases":["EUVD-2011-5027","GHSA-qp9p-q4m6-xmj7"],"status":"published","title":"Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5...","description":"Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary files, and consequently execute arbitrary code, via an unspecified HTTP request.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.13162,"percentile":0.9639,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-22"],"published":"2012-08-26T19:00:00Z","modified":"2026-06-16T23:35:59Z","exploits":[{"source":"exploitdb","id":"EDB-17883","title":"Blue Coat Reporter - Directory Traversal","type":"remote","platform":"hardware","date":"2011-09-22","url":"https://www.exploit-db.com/exploits/17883"}],"products":[{"vendor":"bluecoat","product":"reporter"}],"references":[{"url":"https://kb.bluecoat.com/index?page=content\u0026id=SA60","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-5127"},{"url":"https://github.com/advisories/GHSA-qp9p-q4m6-xmj7"}],"sources":{"cve":[{"id":"CVE-2011-5127","description":"Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary files, and consequently execute arbitrary code, via an unspecified HTTP request.","status":"published","published":"2012-08-26T19:00:00Z","modified":"2024-09-17T01:20:47.302Z","updated_at":"2026-11-02T14:35:36.252742Z"}],"euvd":[{"id":"EUVD-2011-5027","description":"Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary files, and consequently execute arbitrary code, via an unspecified HTTP request.","status":"published","published":"2012-08-26T19:00:00Z","modified":"2024-09-17T01:20:47Z","updated_at":"2026-11-03T00:28:50.749865Z"}],"ghsa":[{"id":"GHSA-qp9p-q4m6-xmj7","title":"Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5...","description":"Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary files, and consequently execute arbitrary code, via an unspecified HTTP request.","status":"published","published":"2022-05-17T05:24:20Z","modified":"2023-01-28T05:03:54Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:44:04.026586Z"}],"nvd":[{"id":"CVE-2011-5127","description":"Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary files, and consequently execute arbitrary code, via an unspecified HTTP request.","status":"published","published":"2012-08-26T19:55:01.903Z","modified":"2026-06-16T23:35:59.943Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:02:12.272092Z"}]}}
