CVE-2012-4959: Novell File Reporter

High severity, CVSS 10.0. EPSS: 71.2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record.

Affected products

• Novell File Reporter: version 1.0.2 only

Published 2012-11-18. Last modified 2026-06-16.