CVE-2025-27380

概要

参考情報

• altium.com/platform/security-compliance/security-advisories · Vendor Advisory

on-prem enterprise server のその他の脆弱性

• CVE-2026-11420緊急 9.8Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise Server allow an unauthenticated network at…
• CVE-2026-11419高 8.8A path traversal vulnerability exists in the Altium Enterprise Server Vault Service UploadController due to improper validation of a user-co…
• CVE-2026-11414緊急 9.8A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in the Vault service. Because the key is ident…
• CVE-2025-27379中 4.6A stored cross-site scripting (XSS) vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary…
• CVE-2025-27378緊急 9.8AES contains a SQL injection vulnerability due to an inactive configuration that prevents the latest SQL parsing logic from being applied. W…