CVE-2025-3021: E-Solutions E-Management

High severity, CVSS 8.7. EPSS: 0.5% chance of exploitation in the next 30 days.

Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint.

Affected products

• E-Solutions E-Management: any version

Published 2025-03-31. Last modified 2026-06-17.