UNKNOWNKNOWN EXPLOITEDRANSOMWARE: KNOWN

CVE-2022-36537

ZK Framework AuUploader Unspecified Vulnerability

Published: 2023-02-27
Modified: 2026-07-31
Sources: cisa-kev

Summary

ZK Framework AuUploader servlets contain an unspecified vulnerability that could allow an attacker to retrieve the content of a file located in the web context. The ZK Framework is an open-source Java framework. This vulnerability can impact multiple products, including but not limited to ConnectWise R1Soft Server Backup Manager.

References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.