Path Traversal in Trellix System Information Reporter
CVE-2025-3722
A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue malicious ePO post requests to System Information Reporter, leading to creation of files anywhere…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.002 (5.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.
Affected products
Weakness classification (CWE)
References
- trellixpsirt@trellix.com (Permissions Required)
Frequently asked questions
- What is CVE-2025-3722?
- CVE-2025-3722 is a medium-severity vulnerability in Trellix System Information Reporter, classified under Path Traversal. CVSS score: 4.4/10. Published 2025-06-26.
- How severe is CVE-2025-3722?
- Medium severity. CVSS v3 base score is 4.4 out of 10.