What is CVE-2025-21095?

CVE-2025-21095 is a medium-severity vulnerability in Keysight Ixia Vision Product Family, classified under Path Traversal. CVSS score: 4.9/10. Published 2025-03-05.

How severe is CVE-2025-21095?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Path Traversal in Keysight Ixia Vision Product Family

CVE-2025-21095

Path traversal may lead to arbitrary file download. The score without least privilege principle violation is as calculated below. In combination with other issues it may facilitate further compromise of the device. Remediation in Version 6.8.0, release date: 01-Mar-25.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.005 (41.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.

Affected products

Keysight Ixia Vision Product Family — versions 6.3.1

Weakness classification (CWE)

CWE-22 — Path Traversal

References

Frequently asked questions

What is CVE-2025-21095?: CVE-2025-21095 is a medium-severity vulnerability in Keysight Ixia Vision Product Family, classified under Path Traversal. CVSS score: 4.9/10. Published 2025-03-05.
How severe is CVE-2025-21095?: Medium severity. CVSS v3 base score is 4.9 out of 10.