CVE-2025-2069

A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user...

CVE-2025-2069

CVE-2025-2069 : The provided connected documents describe a cross-site scripting vulnerability in the Lenovo/FileZ FileZ client. The issue could allow code execution when a local user visits a crafted URL. The CVE details include a local attack vector with low attack complexity and user interacti...

CVE-2025-2068

An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user...

CVE-2025-2068

An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user...

CVE-2025-2068

CVE-2025-2068 relates to the FileZ client and describes an open redirect vulnerability that could enable information disclosure when a crafted URL is visited by a local user. Available connected sources confirm FileZ client as the affected component and an open redirect as the underlying issue, b...

CVE-2025-2070: Improper Restriction of XML External Entity Reference

An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user...

CVE-2025-2068: URL Redirection to Untrusted Site

An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user...

PT-2025-17929 · Unknown · Filez Client

Name of the Vulnerable Software and Affected Versions: FileZ client affected versions not specified Description: An open redirect issue was reported in the FileZ client, potentially leading to information disclosure if a local user visits a crafted URL. Recommendations: At the moment, there is no...

CVE-2025-2069: Improper Neutralization of Input During Web Page Generation

A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user...

Lenovo Filez 代码问题漏洞

Lenovo Filez is an enterprise web drive by the Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo Filez that stems from improper XML parsing, which could lead to arbitrary file reading...

PT-2025-17930 · Unknown · Filez Client

Name of the Vulnerable Software and Affected Versions: FileZ client affected versions not specified Description: A cross-site scripting issue was reported in the FileZ client, which could allow code execution if a local user visits a crafted URL. Recommendations: At the moment, there is no...

PT-2025-17931 · Unknown · Filez Client

Name of the Vulnerable Software and Affected Versions: FileZ client affected versions not specified Description: An improper XML parsing issue was reported in the FileZ client, which could allow arbitrary file reads on the system if a crafted URL is visited by a local user. Recommendations: At th...

Lenovo Filez 输入验证错误漏洞

Lenovo Filez is an enterprise web drive by Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo Filez that stems from an open redirect that could lead to information disclosure...

Lenovo Filez 跨站脚本漏洞

Lenovo Filez is an enterprise web drive of the Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo Filez that originates from cross-site scripting and could lead to code execution...

CVE-2024-8058

An improper parsing vulnerability was reported in the FileZ client that could allow a crafted file in the FileZ directory to read arbitrary files on the device due to URL preloading...

CVE-2024-8058

An improper parsing vulnerability was reported in the FileZ client that could allow a crafted file in the FileZ directory to read arbitrary files on the device due to URL preloading...

CVE-2024-8058

An improper parsing vulnerability was reported in the FileZ client that could allow a crafted file in the FileZ directory to read arbitrary files on the device due to URL preloading...

CVE-2024-8058

An improper parsing vulnerability was reported in the FileZ client that could allow a crafted file in the FileZ directory to read arbitrary files on the device due to URL preloading...

CVE-2024-8058

CVE-2024-8058 concerns the FileZ client and describes an improper parsing vulnerability where a crafted file in the FileZ directory can lead to reading arbitrary files on the device via URL preloading. Affected software: FileZ client. Root cause: improper parsing related to URL preloading. Impact...

CVE-2024-8058: Improper Validation of Specified Type of Input

An improper parsing vulnerability was reported in the FileZ client that could allow a crafted file in the FileZ directory to read arbitrary files on the device due to URL preloading...