PT-2025-49111 · Unknown · Dxenterprise

CVE-2025-9127 · Published 2025-12-04 · Updated 2026-02-03

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions PX Enterprise (affected versions not specified)

Description A flaw exists in PX Enterprise that could lead to the logging of sensitive information under certain circumstances. Approximately 10,000 devices worldwide may be affected. There are no details about specific API endpoints, vulnerable parameters, or function names mentioned in the provided information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-116

Related Identifiers

CVE-2025-9127

Affected Products

Dxenterprise

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-9127 · Security Note
• https://osv.dev/vulnerability/CVE-2025-9127 · Vendor Advisory
• https://t.me/cveNotify/150759 · Telegram Post
• https://support.purestorage.com/category/m_pure_storage_product_security · Note
• https://twitter.com/CVEnew/status/1996647154912309301 · Twitter Post
• https://t.me/CVEtracker/38849 · Telegram Post