Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Riverbed Technology Clear all filters
TI-2025-24272 CVE-2025-34112 · GHSA-m7ph-7x5r-93xq

Riverbed SteelCentral NetProfiler / NetExpress 10.8.7 RCE

Priority HIGH 82

An authenticated multi-stage remote code execution vulnerability exists in Riverbed SteelCentral NetProfiler and NetExpress 10.8.7 virtual appliances.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0282 Published 2025-07-15 No fix listed CWE-266
TI-2025-24258 CVE-2025-34098 · GHSA-2qvj-jmw6-qxmf

Riverbed SteelHead VCX Authenticated Arbitrary File Read via Log Filter Injection

Priority LOW 34

A path traversal vulnerability exists in Riverbed SteelHead VCX appliances (confirmed in VCX255U 9.6.0a) due to improper input validation in the log filtering functionality exposed via the management web interface.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.01267 Published 2025-07-10 No fix listed CWE-200