CVE-2025-11700: N-central Multiple XXE Injection Vulnerabilities
N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2025.4
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11700?
The severity of CVE-2025-11700 is classified as critical due to its potential for information disclosure.
How do I fix CVE-2025-11700?
To fix CVE-2025-11700, upgrade your N-central software to version 2025.4 or later.
What is CVE-2025-11700?
CVE-2025-11700 is a vulnerability in N-central versions prior to 2025.4 that allows XML External Entities injection, leading to potential information disclosure.
What versions of N-central are affected by CVE-2025-11700?
N-central versions earlier than 2025.4 are affected by CVE-2025-11700.
What are the consequences of CVE-2025-11700?
The consequence of CVE-2025-11700 is unauthorized access to sensitive information due to an XML External Entities injection.