CVE-2021-35975: Systematica Financial Calculator

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in the Systematica SMTP Adapter component (up to v2.0.1.101) in Systematica Radius (up to v.3.9.256.777) allows remote attackers to read arbitrary files via a full pathname in GET parameter "file" in URL. Also: affected components in same product - HTTP Adapter (up to v.1.8.0.15), MSSQL MessageBus Proxy (up to v.1.1.06), Financial Calculator (up to v.1.3.05), FIX Adapter (up to v.2.4.0.25)

Affected products

• Systematica Financial Calculator: up to and including 1.3.05
• Systematica Fix Adapter: up to and including 2.4.0.25
• Systematica HTTP Adapter: up to and including 1.8.0.15
• Systematica Mssql Messagebus Proxy: up to and including 1.1.06
• Systematica Radius: up to and including 3.9.256.777
• Systematica Smtp Adapter: up to and including 2.0.1.101

Published 2023-11-30. Last modified 2026-06-17.