Vulnerabilities

TI-2025-40229 CVE-2025-65076 · GHSA-v255-vhcg-3fcj

Arbitrary File Read and Delete via Path Traversal in WaveStore Server

LOW 39

WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00345 Published 2025-12-16 Fixed in 6.44.44 CWE-22

TI-2025-40228 CVE-2025-65075 · GHSA-g4jw-j7g8-f24w

LOW 23

WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00391 Published 2025-12-16 Fixed in 6.44.44 CWE-22

TI-2025-40227 CVE-2025-65074 · GHSA-g2xj-vf89-f76h

MEDIUM 40

WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00489 Published 2025-12-16 Fixed in 6.44.44 CWE-22