Is CVE-2018-7669 actively exploited?

A proof-of-concept exploit is publicly available for CVE-2018-7669, but active exploitation has not been confirmed.

Can CVE-2018-7669 be exploited remotely?

Yes. CVE-2018-7669 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2018-7669?

CVE-2018-7669 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2018-7669

HIGHPOC

CVE-2018-7669

CWE-22Published: April 27, 2018· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application is vulnerable to a directory traversal attack, allowing an attacker to access arbitrary files from the host Operating System using a sitecore/shell/default.aspx?xmlcontrol=LogViewerDetails&file= URI. Validation is performed to ensure that the text passed to the 'file' parameter correlates to the correct log file directory. This filter can be bypassed by including a valid log filename and then appending a traditional 'dot dot' style attack.

NVD Source

Technical Analysis

CVE-2018-7669 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 7.5.

A proof-of-concept (PoC) exploit exists for CVE-2018-7669. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.