This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2025-10544 | BDVDB-2026-295607 Detail

AvePointDocAve

Description#

Unrestricted file upload vulnerability in DocAve 6.13.2, Perimeter 1.12.3, Compliance Guardian 4.7.1, and earlier versions, allowing administrator users to upload files without proper validation. An attacker could exploit this vulnerability by uploading malicious files that compromise the system. In addition, it is vulnerable to Path Traversal, which allows files to be written to arbitrary directories within the web root.

Impact#

Per CVSS v4.0: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.

Weaknesses#

  • CWE-434 Unrestricted Upload of File with Dangerous Type

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.