What’s Vulnerable › Vulnerabilities

CVE-2020-13377

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-05-12 · updated 2026-06-17
• Weakness: CWE-22

Description

The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and write access to sensitive files.

Affected products

• Loadbalancer Enterprise Va Max: through 8.3.8

References

• https://inf0seq.github.io/cve/2020/04/21/Path-Traversal-in-Enterprise-loadbalancer-VA-MAX-v8.3.8-and-earlier.html
• https://www.loadbalancer.org/products/virtual/enterprise-va-max/
• https://inf0seq.github.io/cve/2020/04/21/Path-Traversal-in-Enterprise-loadbalancer-VA-MAX-v8.3.8-and-earlier.html
• https://www.loadbalancer.org/products/virtual/enterprise-va-max/

Get alerted when CVE-2020-13377 or the next vulnerability affects your stack