VULNERABILITY INTELLIGENCE

CVE-2025-4653

EPSS probability3.35%
CISA KEVNot currently listed
Published2025-06-10
Last modified2026-06-17

Description

Improper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects Pandora ITSM 5.0.105.

Weakness classification

  • security@pandorafms.com: CWE-77

Primary references