How severe is CVE-2014-2232?

CVE-2014-2232 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2014-2232 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (68th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2014-2232?

CVE-2014-2232 affects Infoware Mapsuite. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2014-2232?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2014-2232 published?

CVE-2014-2232 was published on 2014-12-01 and last updated on 2026-06-17.

CVE-2014-2232

CVE-2014-2232 is a medium-severity vulnerability in Infoware Mapsuite with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-21.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 1% (68th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-21
Affected product: Infoware Mapsuite
Published: 2014-12-01
Last modified: 2026-06-17

Description

Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files via unspecified vectors.

Frequently asked questions

What is CVE-2014-2232?: Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files via unspecified vectors.
How severe is CVE-2014-2232?: CVE-2014-2232 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2014-2232 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (68th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2014-2232?: CVE-2014-2232 affects Infoware Mapsuite. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2014-2232?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2014-2232 published?: CVE-2014-2232 was published on 2014-12-01 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:infoware:mapsuite:*:*:*:*:*:*:*:*

More vulnerabilities in Infoware Mapsuite

CVE-2014-2843 — Medium (CVSS 6.1): Cross-site scripting (XSS) vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows…
CVE-2014-2233 — Medium (CVSS 5.0): Server-side request forgery (SSRF) vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before…

All CVEs affecting Infoware Mapsuite →

Other CWE-21 vulnerabilities

CVE-2016-1505 — Critical (CVSS 10.0): The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary…
CVE-2019-11626 — Medium (CVSS 5.3): routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an…

Browse all CWE-21 vulnerabilities →