VulnerabilityModified

CVE-2014-2025

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with…

CRITICAL 9.8EPSS 3.97%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.97%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 3.97% probability · 90th percentile
CISA KEV: Not listed
Weakness: CWE-434
Affected: unitedplanet/intrexx
Source: cve@mitre.org

References

http://www.christian-schneider.net/advisories/CVE-2014-2025.txtThird Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/99568Third Party Advisory, VDB Entry
https://help.unitedplanet.com/?rq_AppGuid=C203A277EDDF9AD2492B776B996B20D4A7C58395&rq_TargetPageGuid=2EBBF802B1970FE31EFC8A34108DF3F47E7A8EEC&rq_RecId=31&rq_SourceAppGuid=C203A277EDDF9AD2492B776B996B20D4A7C58395&rq_SourcePageGuid=7A91F4B76FFC41A18F4EA4ACE26F31E033C5B018&rq_SourceRecId=31Third Party Advisory
http://www.christian-schneider.net/advisories/CVE-2014-2025.txtThird Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/99568Third Party Advisory, VDB Entry
https://help.unitedplanet.com/?rq_AppGuid=C203A277EDDF9AD2492B776B996B20D4A7C58395&rq_TargetPageGuid=2EBBF802B1970FE31EFC8A34108DF3F47E7A8EEC&rq_RecId=31&rq_SourceAppGuid=C203A277EDDF9AD2492B776B996B20D4A7C58395&rq_SourcePageGuid=7A91F4B76FFC41A18F4EA4ACE26F31E033C5B018&rq_SourceRecId=31Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.