What’s Vulnerable › Vulnerabilities

CVE-2018-14928

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-03 · updated 2026-06-17
• Weakness: CWE-200

Description

/contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the file parameter.

Affected products

• Matera Banco: 1.0.0

References

• https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9
• https://exchange.xforce.ibmcloud.com/vulnerabilities/147967
• https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9

Get alerted when CVE-2018-14928 or the next vulnerability affects your stack