CVE-2025-6240CWE-20

Profisee Path Traversal Vulnerability

Medium · published June 18, 2025

CVSS v4.0
5.0
EPSS
0%
Percentile
23.5
In the wild
Unconfirmed
What it is

Improper Input Validation vulnerability in Profisee on Windows (filesystem modules) allows Path Traversal after authentication to the Profisee system.This issue affects Profisee: from 2020R1 before 2024R2.

The record
Technical detail
CVSS v4.0
5.0 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/AU:N/V:D/RE:M/U:Green
EPSS
0.00318 · 23.5th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-06-18T14:46Z
EPSS history
Timeline
  • 18 JUN 14:46Z
    Profisee Path Traversal Vulnerability
    cvelistv5