CVE-2025-13879: Directory traversal vulnerability in EfficientIP's SOLIDserver IPAM

Severity: low (CVSS 2.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-02 · updated 2026-10-18
Weakness: CWE-22

Description

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For examplem setting the 'directory' parameter to '/' displays files outside the 'LOCAL:///' folder.

Affected products

SOLIDserver IPAM: 8.2.3

References

https://efficientip.com/resources/solidserver-ipam-solutions-3/
https://www.incibe.es/en/incibe-cert/notices/aviso/directory-traversal-vulnerability-efficientips-solidserver-ipam

Get alerted when CVE-2025-13879 or the next vulnerability affects your stack