CVE-2025-46738

MediumCVSS 6.6/10Last modified Jun 17, 2026

Description

An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published
May 12, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-467398.1An unauthenticated user could discover account credentials via a brute-force attack without rate limitingCVE-2025-46748.6The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuCVE-2025-467407.5An authenticated user without user administrative permissions could change the administrator Account Name.CVE-2025-467415.7A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred.CVE-2025-467424.3Users who were required to change their password could still access system information before changing their passwordCVE-2025-467436.3An authenticated user's token could be used by another source after the user had logged out prior to the token expiring.CVE-2025-467442.7An authenticated administrator could modify the Created By username for a user accountCVE-2025-467456.5An authenticated user without user-management permissions could view other users account information.CVE-2025-467465.8An administrator could discover another account's credentials.CVE-2025-467475.7An authenticated user without user-management permissions could identify other user accounts.CVE-2025-467482.7An authenticated user attempting to change their password could do so without using the current password.CVE-2025-467494.3An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side scri
CVE-2025-46738: Medium severity, CVSS 6.6 | Vulnix