Softwareag Aris
2 CVEs affecting Softwareag Aris. Latest disclosed: 2026-01-07. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-66837 | Medium | 6.8 | 2026-01-07 | A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware |
CVE-2025-66838 | Medium | 6.5 | 2026-01-07 | In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or throttling, allowing users to upload files at an unr… |