$ cve CVE-2013-2474 JSON

CVE-2013-2474 EXPLOIT

7.5

HIGH · CVSS 3.1 · EPSS 10% (pctl 95)

Patch early

A public exploit exists.

Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' parameter.

CVSS	7.5 (HIGH, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS	10.01% — more likely to be exploited than 95% of all CVEs
Weakness	CWE-22
On CISA KEV	no
Public exploit	yes
Published	2020-01-27
Last modified	2026-06-16

Vendor	Product
aws-dms	aws xms

Source	Title	Date
exploit-db	AWS Xms 2.5 - 'importer.php?what' Directory Traversal	2013-03-29