CVE-2025-7388
Last modified
CVE-2025-7388 is a high-severity vulnerability rated 8.4/10 on the CVSS scale. It was possible to perform Remote Command Execution (RCE) via Java RMI interface in the OpenEdge AdminServer, allowing authenticated users to inject and execute OS commands under the delegated authority of the AdminServer process. An RMI interface permitted manipulation of a configuration property with inadequate input validation leading to OS command injection.. EPSS estimates a 0.95% chance of exploitation in the next 30 days.
Description
It was possible to perform Remote Command Execution (RCE) via Java RMI interface in the OpenEdge AdminServer, allowing authenticated users to inject and execute OS commands under the delegated authority of the AdminServer process. An RMI interface permitted manipulation of a configuration property with inadequate input validation leading to OS command injection.
Metrics
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-7388?
How severe is CVE-2025-7388?
How do I fix CVE-2025-7388?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-7382A command injection vulnerability in WebAdmin of Sophos Fire…8.8
- CVE-2025-7383Padding oracle attack vulnerability in Oberon microsystem AG…5.9
- CVE-2025-7384The Database for Contact Form 7, WPforms, Elementor forms pl…9.8
- CVE-2025-7385Input from search query parameter in GOV CMS is not sanitize…9.3
- CVE-2025-7386Information exposure vulnerability in Hitachi Storage Naviga…6.8
- CVE-2025-7387The Lana Downloads Manager plugin for WordPress is vulnerabl…5.5
- CVE-2025-7389A vulnerability in the AdminServer component of OpenEdge on …8.2
- CVE-2025-7390A malicious client can bypass the client certificate trust c…9.1
- CVE-2025-7392Improper Neutralization of Input During Web Page Generation …6.1
- CVE-2025-7393Improper Restriction of Excessive Authentication Attempts vu…9.8
- CVE-2025-7394In the OpenSSL compatibility layer implementation, the funct…9.8
- CVE-2025-7395A certificate verification error in wolfSSL when building wi…9.2
Are you affected by CVE-2025-7388?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST