CVE-2025-59784

Katalog CVE

CVSS 7.2 · High EPSS 0,29%

Kerentanan Improper Output Neutralization for Logs pada 2n access commander. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. This vulnerability can only be exploited after authenticating with administrator privileges.

Rincian

Terbit di NVD

4 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-117: Improper Output Neutralization for Logs

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 20,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.2n.com/en-GB/download/cve_2025_59784_acom_3_5_v1pdf advisory vendor