CVE-2020-36893: Eibiz I-Media Server Digital Signage

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Eibiz i-Media Server Digital Signage 3.8.0 contains a directory traversal vulnerability that allows unauthenticated remote attackers to access files outside the server's root directory. Attackers can exploit the 'oldfile' GET parameter to view sensitive configuration files like web.xml and system files such as win.ini.

Affected products

• Eibiz I-Media Server Digital Signage: version 3.8.0 only

Published 2025-12-10. Last modified 2026-06-17.