Improper input validation in Profisee
CVE-2025-6240
Improper Input Validation vulnerability in Profisee on Windows (filesystem modules) allows Path Traversal after authentication to the Profisee system.This issue affects Profisee: from 2020R1 before 2024R2.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (20.4th percentile) — read the EPSS interpretation.
Affected products
- Profisee — versions 2020R1