Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2025-66955

Local File Inclusion via downloadAttachment Path Parameter in Asseco SEE Live 2.0

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Asseco
Products
Live See Live
CVE-2025-66956

Insecure Access Control in Asseco SEE Live 2.0 – Remote Retrieval and Execution of Attachments

Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed
Vendors
Asseco
Products
See Live