CVE-2025-3322 in OnlineSuite

Riassunto

di MITRE • 06/06/2025

An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: B.Braun
• Prenotare: 05/04/2025
• Divulgazione: 06/06/2025
• Moderazione: accettato
• Voce: VDB-311354
• CPE: pronto
• CWE: CWE-917 (confermato)
• CVSS: 9.8 (VulDB)
• EPSS: 0.00561
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-3322
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-3322
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-3322/