VULNERABILITY INTELLIGENCE
CVE-2025-4653
EPSS probability3.35%
CISA KEVNot currently listed
Published2025-06-10
Last modified2026-06-17
Description
Improper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects Pandora ITSM 5.0.105.
Weakness classification
- security@pandorafms.com: CWE-77