Path Traversal in Efficientip Solidserver Ip Address Management
CVE-2025-13879
Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For examplem setting the 'directory' parameter to '/' displays files outside the 'LOCAL:///' folder.
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 2.7 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N.
EPSS exploit prediction
EPSS: 0.005 (43.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 43rd percentile — 43.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- Efficientip Solidserver Ip Address Management — versions 8.2.3
- Solidserver Ipam — versions 8.2.3
Weakness classification (CWE)
References
- www.incibe.es/en/incibe-cert/notices/aviso/directory-traversal-vulnerability-ef… (Third Party Advisory)
- efficientip.com/resources/solidserver-ipam-solutions-3/ (release-notes, Product, patch)
Frequently asked questions
- What is CVE-2025-13879?
- CVE-2025-13879 is a low-severity vulnerability in Efficientip Solidserver Ip Address Management, classified under Path Traversal. CVSS score: 2.7/10. Published 2025-12-02.
- How severe is CVE-2025-13879?
- Low severity. CVSS v3 base score is 2.7 out of 10.