CVE-2021-32016

CVE-2021-32016 describes a critical directory traversal vulnerability in JUMP AMS version 3.6.0.04.009-2487. This flaw allows an authenticated attacker to write arbitrary files with user-controlled content to any location on the remote filesystem via a JUMP SOAP endpoint, potentially leading to remote code and command execution. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction, resulting in high impacts to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.