CVE-2025-6240: Profisee Path Traversal Vulnerability

Severity: medium (CVSS 5.0 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-06-18 · updated 2026-06-17
Weakness: CWE-20

Description

Improper Input Validation vulnerability in Profisee on Windows (filesystem modules) allows Path Traversal after authentication to the Profisee system.This issue affects Profisee: from 2020R1 before 2024R2.

Affected products

Profisee: from 2020R1 before 2024R2 — fixed in 2024R2

How to fix

Upgrade to a fixed version: Profisee 2024R2. Check the vendor advisory for mitigations.

References

https://profisee.com/security/vulnerabilities/detail/

Get alerted when CVE-2025-6240 or the next vulnerability affects your stack