VULNERABILITY INTELLIGENCE
CVE-2025-11565
EPSS probability0.14%
CISA KEVNot currently listed
Published2025-11-12
Last modified2026-10-18
Description
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause elevated system access when a Web Admin user on the local network tampers with the POST /REST/UpdateJRE request payload.
Weakness classification
- cybersecurity@se.com: CWE-22