Ge Vernova Smallworld vulnerabilities

2 CVEs affecting Ge Vernova Smallworld, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-7719, published 2025-11-07.

More from Ge Vernova.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-3222, published 2025-11-07. Critical severity, CVSS 9.3. EPSS: 0.4% chance of exploitation in the next 30 days. Improper Authentication vulnerability in GE Vernova Smallworld on Windows, Linux allows Authentication Abuse.This issue affects Smallworld: 5.3.3 and prior versions for Linux, and 5.3.4. and prior…
• CVE-2025-7719, published 2025-11-07. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova Smallworld on Windows, Linux allows File Manipulation.This issue affects Smallworld: 5.3.5.…