CVE-2004-2121: Borland Software Web Server For Corel Paradox

Medium severity, CVSS 5.0. EPSS: 3.1% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c%2e%2e" (encoded "\..") sequences, in the URL.

Affected products

• Borland Software Web Server For Corel Paradox: up to and including 1.0_b3

Published 2004-12-31. Last modified 2026-06-16.