CVE-2014-9181: Plex Media Server

Medium severity, CVSS 5.0. EPSS: 9.5% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .. (dot dot) in the URI to (1) manage/ or (2) web/ or remote authenticated users to read arbitrary files via a .. (dot dot) in the URI to resources/.

Affected products

• Plex Media Server: up to and including 0.9.9.2

Published 2014-12-02. Last modified 2026-06-17.