Vulnerability · Published Mar 18, 2025 · Assigned by INCIBE
CVE-2025-2493Path Traversal vulnerability in Softdial Contact Center
High 8.7
In plain English
A high-severity path traversal in Softdial Contact Center from Sytel Ltd. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).
Severity (CVSS 4.0)8.7High
Exploit odds (30 days)0.5%top 54.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Path Traversal vulnerability in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to manipulate the ‘id’ parameter of the ‘/softdial/scheduler/load.php’ endpoint to navigate beyond the intended directory. This can allow unauthorised access to sensitive files outside the expected scope, posing a security risk.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Sytel Ltd | Softdial Contact Center | all versions |
Weakness: CWE-22 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N