Arbitrary File Read Vulnerability in Vitals ESP by Galaxy Software Services

CVE-2025-14253

What is CVE-2025-14253?

The Vitals ESP product by Galaxy Software Services is vulnerable to an Arbitrary File Read attack due to Absolute Path Traversal. This allows privileged remote attackers to exploit the vulnerability and download arbitrary system files, potentially compromising sensitive information stored on the server. Organizations using vulnerable versions need to take immediate action to mitigate the risks associated with this security flaw.

References