CVE Catalog
CVE-2025-66837
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk0.30%
23th percentile - higher than 23% of all known CVEs
Summary
A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code by uploading a crafted PDF file or malware.
Risk Assessment
An attacker can upload a malicious file and achieve code execution, potentially leading to server compromise and data breach.
Recommendation
Restrict file uploads to trusted users, validate uploaded file content, and apply the vendor patch.
Other vulnerabilities in ARIS
Original NVD description (English source)
A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware
Vulnerability data from NVD (NIST) · CISA KEV · EPSS