Medium severity6.7NVD Advisory· Published May 22, 2025· Updated Apr 15, 2026

CVE-2025-30169

Description

File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

Affected products

Abb/ASPECT-Enterprisellm-fuzzy
Range: <=3.08.03
Abb/NEXUS Seriesllm-fuzzy
Range: <=3.08.03
Abb/MATRIX Seriesllm-fuzzy
Range: <=3.08.03

Patches

Vulnerability mechanics

References

search.abb.com/library/Download.aspxnvd

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000