Multiple directory traversal vulnerabilities in CA ERwin Web Portal 9.5 allow remote attackers to obtain sensitive information bypass intended access restrictions cause a denial of service or possibly execute arbitrary code via unspecified vectors.