CVE-2014-2232

MEDIUM 5.0CVE-2014-2232 · Published 01/12/2014 · updated 17/06/2026

In short

CVE-2014-2232 is a MEDIUM (CVSS 5.0) vulnerability affecting mapsuite (infoware).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.6% of all vulnerabilities.
Fix: update to 1.0.36, 1.1.49 or later.

Package	Affected versions	Patched versions
mapsuite infoware	`≥ 1.0, < 1.0.36≥ 1.1, < 1.1.49`	`1.0.361.1.49`

Description

Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files via unspecified vectors.

References

iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp · Vendor Advisory
iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp · Vendor Advisory
christian-schneider.net/advisories/CVE-2014-2232.txt · Third Party Advisory

More vulnerabilities in mapsuite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free