Security Advisory

CVE-2025-48047

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-05-29 12:36:13

Last updated 2025-05-29 13:15:14

Assigner rapid7

CVSS score 9.4

State PUBLISHED

An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint.