Servers and applications
CVE-2012-3305 Directory traversal vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to overwrite arbitrary files via a crafted application file.
Severity Medium 6.4
Published 25 Sept 2012
Last changed 16 Jun 2026
Added to UpHeron 1 Nov 2026 Exploit chance 2.9% in the next 30 daysHigher than 87% of CVEs. EPSS by FIRST , 12 Nov 2026
Attack Over the network · No login needed
Attacker can Change some data · Slow it down
CVSS vector AV:N/AC:L/Au:N/C:N/I:P/A:P
Sources NVD Affected software Software Affected versions IBM WebSphere Application ServerServers and applications · cpe:a:ibm:websphere_application_server Version 8.5.0.0 Version 8.0.0.4 Version 8.0.0.3 Version 8.0.0.2 All 61 release lines Version 6.1 Version 6.1.0.1 Version 6.1.0.2 Version 6.1.0.3 Version 6.1.0.4 Version 6.1.0.10 Version 6.1.0.11 Version 6.1.0.12 Version 6.1.0.13 Version 6.1.0.14 Version 6.1.0.15 Version 6.1.0.16 Version 6.1.0.17 Version 6.1.0.18 Version 6.1.0.19 Version 6.1.0.20 Version 6.1.0.21 Version 6.1.0.22 Version 6.1.0.23 Version 6.1.0.24 Version 6.1.0.25 Version 6.1.0.26 Version 6.1.0.27 Version 6.1.0.28 Version 6.1.0.29 Version 6.1.0.31 Version 6.1.0.32 Version 6.1.0.33 Version 6.1.0.34 Version 6.1.0.35 Version 6.1.0.36 Version 6.1.0.37 Version 6.1.0.38 Version 6.1.0.39 Version 6.1.0.41 Version 6.1.0.42 Version 6.1.0.43 Version 6.1.0.44 Version 6.1.0.45 Version 7.0 Version 7.0.0.1 Version 7.0.0.2 Version 7.0.0.10 Version 7.0.0.11 Version 7.0.0.12 Version 7.0.0.13 Version 7.0.0.14 Version 7.0.0.15 Version 7.0.0.16 Version 7.0.0.17 Version 7.0.0.18 Version 7.0.0.19 Version 7.0.0.21 Version 7.0.0.22 Version 7.0.0.23 Version 8.0 Version 8.0.0.1 Version 8.0.0.2 Version 8.0.0.3 Version 8.0.0.4 Version 8.5.0.0
References NVD https://nvd.nist.gov/vuln/detail/CVE-2012-3305 CVE.org https://www.cve.org/CVERecord?id=CVE-2012-3305