{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2025-59711", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-04-03T15:12:37.606Z", "dateReserved": "2025-09-19T00:00:00.000Z", "datePublished": "2026-04-03T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-04-03T14:40:07.944Z"}, "descriptions": [{"lang": "en", "value": "An issue was discovered in Biztalk360 before 11.5. Because of mishandling of user-provided input in an upload mechanism, an authenticated attacker is able to write files outside of the destination directory and/or coerce an authentication from the service, aka Directory Traversal."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://www.synacktiv.com/en/advisories/remote-code-execution-from-any-domain-account-in-biztalk360"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-22", "lang": "en", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-04-03T15:12:07.576027Z", "id": "CVE-2025-59711", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-03T15:12:37.606Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-59711", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-03T15:12:07.576027Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-03T15:08:33.167Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://www.synacktiv.com/en/advisories/remote-code-execution-from-any-domain-account-in-biztalk360"}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Biztalk360 before 11.5. Because of mishandling of user-provided input in an upload mechanism, an authenticated attacker is able to write files outside of the destination directory and/or coerce an authentication from the service, aka Directory Traversal."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-04-03T14:40:07.944Z"}}}, "cveMetadata": {"cveId": "CVE-2025-59711", "state": "PUBLISHED", "dateUpdated": "2026-04-03T15:12:37.606Z", "dateReserved": "2025-09-19T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-04-03T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:kovai:biztalk360:*:*:*:*:*:*:*:*", "matchCriteriaId": "71A18991-9CB5-4CF6-BE4C-1F8A8847AEE0", "versionEndExcluding": "11.6.3963.2611", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An issue was discovered in Biztalk360 before 11.5. Because of mishandling of user-provided input in an upload mechanism, an authenticated attacker is able to write files outside of the destination directory and/or coerce an authentication from the service, aka Directory Traversal."}], "id": "CVE-2025-59711", "lastModified": "2026-04-09T00:30:06.267", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.5, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2026-04-03T15:16:04.637", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://www.synacktiv.com/en/advisories/remote-code-execution-from-any-domain-account-in-biztalk360"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,11.5)"}}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}]}, "original": {"product": "n/a", "source": "cna", "vendor": "n/a"}, "product": "biztalk360", "vendor": "biztalk360"}], "analysis": {"en": {"generated_at": "2026-04-03T18:58:13.073592+00:00", "value": {"mitigation_remediation": ["Apply the latest Biztalk360 patch (v11.5 or later) to fix the upload handling flaw.", "If a patch is not yet available, isolate the upload endpoint so that only files can be written within a strictly defined directory, validating the path server-side.", "Run the Biztalk360 service with the minimal privileges necessary, preventing it from writing to arbitrary directories.", "Configure file-system auditing and monitoring to alert on unexpected file creation in protected directories.", "Restrict or disable domain accounts that have access to the upload feature until the issue is resolved."], "summary": {"action": "Patch Immediately", "impact": "Unauthorized file write via directory traversal"}, "threat_synthesis": {"affected_systems": "All Biztalk360 releases before version 11.5 are vulnerable. No other vendors or products are mentioned in the advisory. Organizations that run versions 11.4 or earlier should assess whether they are still exposed, as the issue is tied to the upload handling code present in those releases.", "description_and_impact": "An authenticated user can exploit a flaw in Biztalk360's file upload feature, where the application fails to sanitize the target path. The malicious request can cause the system to write files outside the intended directory. If an attacker places a script, executable, or configuration file in a sensitive location, they can potentially execute arbitrary code or alter critical settings, leading to compromise of the platform.\n\nAll Biztalk360 releases before version 11.5 are vulnerable. No other vendors or products are mentioned in the advisory. Organizations that run versions 11.4 or earlier should assess whether they are still exposed, as the issue is tied to the upload handling code present in those releases.", "risk_and_exploitability": "The CVSS score of 8.3 indicates a high severity impact. The flaw requires valid credentials, so attacks are limited to authenticated users or domain accounts. EPSS data is unavailable, and the vulnerability is not listed in the KEV catalog, suggesting no documented public exploits yet. Nevertheless, the combination of high severity, authenticated access, and the ability to write arbitrary files warrants immediate attention."}}}}, "created": "2026-04-03T21:17:08.356304+00:00", "title": "Directory Traversal Leading to Unauthorized File Write in Biztalk360", "updated": "2026-04-06T21:23:13.355443+00:00", "vendors": ["biztalk360", "biztalk360$PRODUCT$biztalk360"]}