CVE-2014-9619: Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before...

Security readout for executives and security teams

This is an authenticated file-upload flaw in Netsweeper Cloud Manager. An administrator could upload a disguised PHP file and then reach it through the web server, resulting in code execution on the console. It matters most where old Netsweeper admin interfaces are reachable or weakly controlled. Exposure is limited to Netsweeper deployments running the listed vulnerable versions with Cloud Manager web console access available to authenticated administrators. Risk increases if the console is externally reachable or admin accounts are shared, weak, or compromised. Prioritize remediation if Netsweeper is still present and the admin console is reachable. Although exploitation requires admin privileges, successful abuse can become server-side code execution, which can affect filtering infrastructure and administrative trust boundaries. Mitigation focus: Upgrade Netsweeper to 3.1.10, 4.0.9, 4.1.2, or later as applicable.; Restrict Cloud Manager web console access to trusted administrative networks.; Review and reduce administrator accounts with console upload capability..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.