← Database

CVE-2025-14253

MEDIUM CVSS: 4.9 Published: 2025-12-08 Modified: 2026-06-17

Description

Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

Affected Platforms

Gss Vitalsesp

Weakness Type

CWE-36

References