Is CVE-2016-20029 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2016-20029 being exploited in the wild.

How severe is CVE-2016-20029?

Medium severity, with a CVSS score of 6.2, published 16 March 2026.

Which products and versions are affected?

Zkteco ZKBioSecurity 3.0.1.0_R_230 and earlier.

Is there a fix for CVE-2016-20029?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2016-20029 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2016-20029?

Check whether you run Zkteco ZKBioSecurity at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2016-20029: ZKTeco ZKBioSecurity directory traversal in baseAction!getPageXML.action

CVE-2016-20029 · Severity: medium · CVSS 6.2 · Published 2026-03-16

ZKTeco ZKBioSecurity is an all-in-one security platform used for managing building access control, video surveillance, and visitor management. A security flaw in version 3.0 allows unauthorized individuals to access sensitive files on the server by manipulating web addresses. This could lead to the theft of configuration data, source code, and other private information, potentially compromising the security of the entire facility management system.

Technologies: Zkteco ZKBioSecurity. Vendors: Zkteco.

Quick answers

Is CVE-2016-20029 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2016-20029 being exploited in the wild.
How severe is CVE-2016-20029?: Medium severity, with a CVSS score of 6.2, published 16 March 2026.
Which products and versions are affected?: Zkteco ZKBioSecurity 3.0.1.0_R_230 and earlier.
Is there a fix for CVE-2016-20029?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2016-20029 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2016-20029?: Check whether you run Zkteco ZKBioSecurity at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A directory traversal (file path manipulation) vulnerability exists in ZKTeco ZKBioSecurity 3.0, specifically within the 'xmlPath' parameter of the 'baseAction!getPageXML.action' component. By using traversal sequences (e.g., '../'), an unauthenticated remote attacker can bypass access controls to read sensitive files outside of the intended directory, such as 'WEB-INF/web.xml'. This can result in the disclosure of application configuration files, source code, and other protected resources. The vulnerability was tested on environments running Apache Tomcat 7.0.56 on Windows 7.

Affected products

ZKTeco ZKBioSecurity 3.0.1.0_R_230 and earlier

Timeline

2016-07-18: disclosed: Initial discovery by Zero Science Lab
2016-08-31: other: Exploit published on Exploit-DB
2026-03-16: advisory: CVE assigned/published in NVD via VulnCheck

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.