Medium severity6.5NVD Advisory· Published Mar 12, 2026· Updated May 12, 2026
CVE-2025-66955
CVE-2025-66955
Description
Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls.
Affected products
1- Asseco SEE/Asseco SEE Livedescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- asseco.comnvd
- live.asee.ionvd
News mentions
0No linked articles in our index yet.