CVE-2012-4957: Novell File Reporter

High severity, CVSS 7.8. EPSS: 67.6% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record.

Affected products

• Novell File Reporter: version 1.0.2 only

Published 2012-11-18. Last modified 2026-06-16.