CVE-2015-2071: Etouch Samepage

Medium severity, CVSS 4.0. EPSS: 6.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the filepath parameter.

Affected products

• Etouch Samepage: version 4.4.0.0.239 only

Published 2015-02-24. Last modified 2026-06-17.