CVE-2025-14697
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
In Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3, unknown functionality in /ExportFiles/ allows access to files or directories. The attack can be launched remotely but has high complexity. The exploit is publicly available.
Risk Assessment
The public exploit could allow an attacker to access sensitive files or directories, potentially leading to disclosure of confidential data.
Recommendation
Restrict access to the /ExportFiles/ directory and consider updating the system if a fix is available.
Other vulnerabilities in Sixun Shanghui Group Business Management System
Original NVD description (English source)
A security flaw has been discovered in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3. Affected by this issue is some unknown functionality of the file /ExportFiles/. The manipulation results in files or directories accessible. The attack may be launched remotely. This attack is characterized by high complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS