CVE-2011-2474: Sybase Easerver

Medium severity, CVSS 5.0. EPSS: 63.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary files via a /.\../\../\ sequence in a path.

Affected products

• Sybase Easerver: version 6.3.1 only

Published 2011-06-09. Last modified 2026-06-16.