CVE-2014-2025

CRITICAL

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unknown vectors.

Published: Jan 31, 2020 Modified: Jun 17, 2026

CWE-434

CVSS Metrics

CVSSv3

Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (2)

Vendor	Product	Version
unitedplanet	intrexx	5.2
unitedplanet	intrexx	6.0

GitHub Security Advisory GHSA-4rc2-384v-9w8v

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet...

References (6)

http://www.christian-schneider.net/advisories/CVE-2014-2025.txt Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/99568 Third Party Advisory, VDB Entry
https://help.unitedplanet.com/?rq_AppGuid=C203A277EDDF9AD2492B776B996B20D4A7C58395&rq_TargetPageGuid=2EBBF802B1970FE31EFC8A34108DF3F47E7A8EEC&rq_RecId=31&rq_SourceAppGuid=C203A277EDDF9AD2492B776B996B20D4A7C58395&rq_SourcePageGuid=7A91F4B76FFC41A18F4EA4ACE26F31E033C5B018&rq_SourceRecId=31 Third Party Advisory
http://www.christian-schneider.net/advisories/CVE-2014-2025.txt Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/99568 Third Party Advisory, VDB Entry
https://help.unitedplanet.com/?rq_AppGuid=C203A277EDDF9AD2492B776B996B20D4A7C58395&rq_TargetPageGuid=2EBBF802B1970FE31EFC8A34108DF3F47E7A8EEC&rq_RecId=31&rq_SourceAppGuid=C203A277EDDF9AD2492B776B996B20D4A7C58395&rq_SourcePageGuid=7A91F4B76FFC41A18F4EA4ACE26F31E033C5B018&rq_SourceRecId=31 Third Party Advisory

Risk Scores

CVSS Score 9.8 / 10

EPSS Score 3.97%

Top 10% most likely to be exploited

Threat Score 40.4 / 100

Data Sources

NVD EPSS GitHub