An issue was discovered in Biztalk360 through 11.5. because of mishandling of user-provided input in a path to be read by the server, a Super User attacker is able to read files on the system and/or coerce an authentication from the service, aka Directory Traversal.
References
| Link | Resource |
|---|---|
| https://www.synacktiv.com/en/advisories/remote-code-execution-from-any-domain-account-in-biztalk360 | Third Party Advisory |
Configurations
History
09 Apr 2026, 00:57
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-22 | |
| First Time |
Kovai
Kovai biztalk360 |
|
| References | () https://www.synacktiv.com/en/advisories/remote-code-execution-from-any-domain-account-in-biztalk360 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.8 |
| CPE | cpe:2.3:a:kovai:biztalk360:*:*:*:*:*:*:*:* |
03 Apr 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-03 15:16
Updated : 2026-04-09 21:16
NVD link : CVE-2025-59709
Mitre link : CVE-2025-59709
CVE.ORG link : CVE-2025-59709
JSON object : View
Products Affected
kovai
- biztalk360
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')