CVE-2025-25652

Description

In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://eptura.com/our-platform/archibus/ Product
• https://packetstorm.news/files/id/213675 ExploitThird Party Advisory