CVE-2025-53120

Securden Unified PAM Path Traversal In File Upload

Description

A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directories, achieving remote code execution on the Unified PAM server.

N/A

CVSS

Severity:

EPSS 0.30%

Third-Party Advisory rapid7.com

Affected: Securden Unified PAM

References

Link	Tags
https://www.rapid7.com/blog/post/securden-unified-pam-multiple-critical-vulnerabilities-fixed/	third party advisory

Frequently Asked Questions

What is the severity of CVE-2025-53120?: CVE-2025-53120 has not yet been assigned a CVSS score.
How to fix CVE-2025-53120?: To fix CVE-2025-53120, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2025-53120 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2025-53120 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2025-53120?: CVE-2025-53120 affects Securden Unified PAM.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.