CVE-2009-4800: Sysax Multi Server

Medium severity, CVSS 4.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a ..// (dot dot slash slash) in a DELE command.

Affected products

• Sysax Multi Server: version 4.3 only; version 4.5 only

Published 2010-04-22. Last modified 2026-06-16.