CVE-2013-3626: Attachmate Verastream Host Integrator

High severity, CVSS 9.3. EPSS: 2.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator (VHI) 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message.

Affected products

• Attachmate Verastream Host Integrator: version 6.0 only; version 6.5 only; version 6.6 only; version 7.0 only; version 7.1 only; version 7.5 only

Published 2013-11-06. Last modified 2026-06-16.