CVE-2025-59689
🔥 Known Exploited (CISA KEV)MEDIUM
6.1
CVSS Severity Score
Vulnerability Description
Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For ESG 5.5. a fix has been released in 5.5.7.
Affected Platforms (CPE)
📦
Libraesva
Email Security Gateway
>= 4.5 and < 5.0.31>= 5.1.0 and < 5.1.20>= 5.2.0 and < 5.2.31>= 5.3.0 and < 5.3.16>= 5.4.0 and < 5.4.8>= 5.5.0 and < 5.5.7