How severe is CVE-2025-25266?

This vulnerability has a severity rating of HIGH with a CVSS score of 6.8 out of 10.

What type of vulnerability is CVE-2025-25266?

This is classified as CWE-552, which is a common weakness in software security.

CVE-2025-25266 - HIGH Severity | CVSS 6.8

Vulnerability Description

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application does not properly restrict access to the file deletion functionality. This could allow an unauthorized attacker to delete files even when access to the system should be prohibited, resulting in potential data loss or unauthorized modification of system files.

Related Vulnerabilities

CVE-2020-15224

MEDIUM

CVSS:6.8(Medium)

In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host applicati...

CWE-5522020

CVE-2023-45594

MEDIUM

CVSS:6.8(Medium)

A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser allows a physical attacker to arbitrarily download/upload files to/from the file system, ...

CWE-5522023

CVE-2021-20253

MEDIUM

CVSS:6.7(Medium)

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside ...

CWE-5522021

CVE-2023-39479

MEDIUM

CVSS:6.6(Medium)

Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability. This vulnerability allows remote attackers to create directories on affected installations of Softing Secure Integrat...

CWE-5522023

CVE-2016-10829

MEDIUM

CVSS:6.5(Medium)

cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99).

CWE-5522016

CVE-2017-1308

MEDIUM

CVSS:6.5(Medium)

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due to improper access controls. IBM X-Force I...

CWE-5522017