CVE-2025-63910

Katalog CVE

CVSS 7.2 · High EPSS 0,36%

Kerentanan Insufficient Verification of Data Authenticity pada cohesity tranzman. Skor CVSS 3.1 7.2 (High) menurut mitre.org.

Deskripsi (NVD)

An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted patch file.

Rincian

Terbit di NVD

3 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.2 (High), sumber mitre.org
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-345: Insufficient Verification of Data Authenticity

EPSS (30 hari)

0,36% peluang dieksploitasi; lebih tinggi dari 28,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/GregDurys/74c36c36bef81293a42022758f2736a9 exploit · advisory pihak ketiga
• https://github.com/GregDurys/Cohesity-TranZman-CVEs advisory pihak ketiga
• https://docs.stoneram.com/index.php/Tranzman product