Asseco Live vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Asseco Live: 1 record(s), with affected versions and fixes.
cpe:2.3:a:asseco:live

CVE-2025-66955 Medium · 6.5 CWE-552 Mar 12, 2026

Files or Directories Accessible to External Parties in Asseco Live

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls.