VYPR
← All advisories
High severity8.8NVD Advisory· Published Nov 12, 2025· Updated Jun 17, 2026

CVE-2025-12382

CVE-2025-12382

Description

Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Analyzer: A33.0 (up to build 320), A33.10 (up to build 210).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Manageengine/Firewallanalyzer6 versions
    cpe:2.3:a:algosec:firewall_analyzer:a33.0:-:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:algosec:firewall_analyzer:a33.0:-:*:*:*:*:*:*
    • cpe:2.3:a:algosec:firewall_analyzer:a33.0:build320:*:*:*:*:*:*
    • cpe:2.3:a:algosec:firewall_analyzer:a33.10:-:*:*:*:*:*:*
    • cpe:2.3:a:algosec:firewall_analyzer:a33.10:build210:*:*:*:*:*:*
    • (no CPE)range: A33.0 (up to build 320), A33.10 (up to build 210)
    • (no CPE)range: A33.0 (up to build 320)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.