Back
CVE-2012-5972
SpecView Directory Traversal
Low2.6EPSS 5.0%
- Published
- Updated
- Reserved
- Assigned by
- icscert
Description
Directory traversal vulnerability in the web server in SpecView 2.5 build 853 and earlier allows remote attackers to read arbitrary files via a ... (dot dot dot) in a URI.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 2.0 | Low2.6 | AV:N/AC:H/Au:N/C:P/I:N/A:N |
| NVDNVD · Modified | 2.0 | Medium5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
- EPSS (exploitation in 30 days)
- 5.0% · top 7.8% of all CVEs (2 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.6.
Weakness
Affected products
SpecView · SpecView
- affected ≤ 2.5 Build 853
What to do
Solution: SpecView recommends users download and install the update from their web site which mitigates the vulnerability.
References (3)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Record last updated .