CVE-2015-4068
Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
Published May 29, 2015 · updated Jun 16, 2026 · arcserve udp
Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFileServlet or (2) exportServlet servlet.
Timeline
Detection, updates, and resolution for this record.
May 29, 2015 · Catalog
Detected
Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFileServlet or (2) exportServlet servlet.
Mar 25, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Apr 15, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFileServlet or (2) exportServlet servlet.
Required action
Apply updates per vendor instructions.
CISA due date Apr 15, 2022
Affected
- cpe arcserve/udpversion unspecified
- cpe arcserve/udp5.0
- vendor Arcserve Unified Data Protection (UDP)version unspecified
Sources
- CISA KEVCVE-2015-4068
Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service.
cisa.gov - CVE.orgCVE-2015-4068
Official CVE identifier
cve.org - FIRST EPSSCVE-2015-4068
30-day exploitation probability 63.6%
first.org - NIST NVDCVE-2015-4068
Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFileServlet or (2) exportServlet servlet.
nvd.nist.gov