Directory Traversal Vulnerability in Eptura Archibus Platform
CVE-2025-25652

7.5HIGH

Key Information:

Vendor

Eptura

Status
Archibus
Vendor
CVE Published:
13 January 2026

What is CVE-2025-25652?

A directory traversal vulnerability exists in the 'Run script' and 'Server File' components of the Database Update Wizard in Eptura Archibus 2024.03.01.109. This flaw can potentially allow unauthorized users to access sensitive files and directories on the server, which could lead to data exposure and further compromise of the application. Proper validation of input is essential to mitigate these types of security risks.

References

https://eptura.com/our-platform/archibus/
https://packetstorm.news/files/id/213675

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.