high7.5
CVE-2025-25652
In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal.
Impact
In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eptura | Archibus | Version 2024.03.01.109 |