PT-2025-26167 · Profisee · Profisee

Mikko Korpi + 1 · Published 2025-06-18 · Updated 2025-06-18 · CVE-2025-6240

Positive Technologies (AI Summary)

CVSS v4.0

4.9

Medium

Base vector

AV:N/AC:H/AT:N/PR:H/UI:A/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/AU:N/V:D/RE:M/U:Green

Name of the Vulnerable Software and Affected Versions Profisee versions 2020R1 through 2024R1

Description The issue is related to an Improper Input Validation vulnerability in the filesystem modules of Profisee on Windows, allowing Path Traversal after authentication to the Profisee system.

Recommendations For versions 2020R1 through 2024R1, update to version 2024R2 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-6240

Affected Products

Profisee

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-6240 · Security Note
• https://t.me/cvetracker/26512 · Telegram Post
• https://twitter.com/CVEnew/status/1935350972701983030 · Twitter Post
• https://profisee.com/security/vulnerabilities/detail · Note