VULNERABILITY INTELLIGENCE

CVE-2025-66955

CVSS score6.5 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-03-12
Last modified2026-07-05
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-552

Primary references