What is CVE-2025-11020?

CVE-2025-11020 is a high-severity vulnerability in Markany Safepc Enterprise, classified under Path Traversal. CVSS score: 8.8/10. Published 2025-10-02.

How severe is CVE-2025-11020?

High severity. CVSS v3 base score is 8.8 out of 10.

SQL Injection in Markany Safepc Enterprise

CVE-2025-11020

An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly exploits Unrestricted Upload of File with Dangerous Type vulnerability in MarkAny SafePC Enterprise on Windows, Linux.This issue affects SafePC Enterprise: V7.0.* (V7.0.YYYY.MM.DD) before V7.0.1, and V5.*.*.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.003 (20.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Markany Safepc Enterprise — versions V7.0.* (V7.0.YYYY.MM.DD), V5.*.*

Weakness classification (CWE)

References

09832df1-09c1-45b4-8a85-16c601d30feb

Frequently asked questions

What is CVE-2025-11020?: CVE-2025-11020 is a high-severity vulnerability in Markany Safepc Enterprise, classified under Path Traversal. CVSS score: 8.8/10. Published 2025-10-02.
How severe is CVE-2025-11020?: High severity. CVSS v3 base score is 8.8 out of 10.