7.3
Élevée
CVE-2025-11565 CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could…
Description
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause elevated system access when a Web Admin user on the local network tampers with the POST /REST/UpdateJRE request payload.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PowerChute™ Serial Shutdown | Versions non publiées |
Autres CVE de PowerChute™ Serial Shutdown
Les 11 CVE de PowerChute™ Serial Shutdown →
CVE-2026-13348
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker…
6.9
Moyenne
CVE-2026-2401
CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information…
2.4
Faible
CVE-2026-2400
CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application…
5.3
Moyenne
CVE-2026-2403
CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log…
5.3
Moyenne