CVE-2025-30169

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published: May 22, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-30175.3A vulnerability, which was classified as critical, has been found in TA-Lib up to 0.6.4. This issue affects the function setInputBuffer of t CVE-2025-301705.5Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system information if session CVE-2025-301719.0System File Deletion vulnerabilities in ASPECT provide attackers access to delete system files if session administrator credentials become c CVE-2025-301728.0Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPEC CVE-2025-301736.7File upload vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterpri CVE-2025-301747.5A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V CVE-2025-301757.5A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V CVE-2025-301767.5A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V CVE-2025-301776.5Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions. This issue affects Apache Camel: fr CVE-2025-301796.5Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8 fail to enforce MFA on certain search APIs, which allows authentica CVE-2025-30187.5A vulnerability, which was classified as critical, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of t CVE-2025-301826.7Uncontrolled search path for some Intel(R) Distribution for Python software installers before version 2025.2.0 within Ring 3: User Applicati