CVE-2025-62851
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
License Center prior to version 1.9.56 contains a path traversal vulnerability. A local attacker with an administrator account can read the contents of unexpected files or system data.
Risk Assessment
An attacker with admin privileges can access sensitive system files, potentially leading to further system compromise.
Recommendation
Upgrade License Center to version 1.9.56 or later. Limit the number of administrator accounts.
Other vulnerabilities in License Center
See all- CVE-2025-53597Medium
A buffer overflow vulnerability in License Center. A remote attacker with an administrator account can exploit it to modify memory or crash processes. The issue is fixed in version 2.0.36 and later.
- CVE-2025-52871Medium
An out-of-bounds read vulnerability in License Center. A remote attacker with a user account can exploit it to obtain secret data. The issue is fixed in version 2.0.36 and later.
Original NVD description (English source)
A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: License Center 1.9.56 and later
Vulnerability data from NVD (NIST) · CISA KEV · EPSS