CVE-2025-14699CWE-22path-traversal

CVE-2025-14699

Medium · published December 15, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
9.1
In the wild
Unconfirmed
What it is

A security vulnerability has been detected in Municorn FAX App 3.27.0 on Android. This vulnerability affects unknown code of the component biz.faxapp.app. Such manipulation leads to path traversal. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00199 · 9.1th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-12-15T08:15Z
References (4)
https://github.com/Secsys-FDU/AF_CVEs/issues/3 · [email protected]https://vuldb.com/?ctiid.336417 · [email protected]https://vuldb.com/?id.336417 · [email protected]https://vuldb.com/?submit.706215 · [email protected]
EPSS history
Timeline
  • 15 DEC 03:02Z
    Municorn FAX App biz.faxapp.app path traversal
    cvelistv5