CVE-2025-11020 in SafePC Enterprise

Riassunto

di MITRE • 02/10/2025

An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly exploits Unrestricted Upload of File with Dangerous Type vulnerability in MarkAny SafePC Enterprise on Windows, Linux.This issue affects SafePC Enterprise: V7.0.* (V7.0.YYYY.MM.DD) before V7.0.1, and V5.*.*.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: FSI
• Prenotare: 26/09/2025
• Divulgazione: 02/10/2025
• Moderazione: accettato
• Voce: VDB-326681
• CPE: pronto
• CWE: CWE-89 (confermato)
• CVSS: 8.8 (CNA)
• EPSS: 0.00281
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-11020
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-11020
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-11020/