CVE-2012-4991

CVE-2012-4991 describes multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier. Authenticated remote attackers can exploit this flaw by using an encoded dot-dot-backslash sequence in a URI to read, delete, or create files, or list directories. With a CVSS score of 8.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and high impact on confidentiality and integrity. While not listed on CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.