Galaxy Software Services Vitals ESP Arbitrary File Read Vulnerability

Vulnerability

An arbitrary file read vulnerability has been identified in Vitals ESP developed by Galaxy Software Services, affecting versions through 6.3. This vulnerability allows privileged remote attackers to exploit absolute path traversal to download arbitrary system files.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive system files, potentially allowing for further exploitation or information disclosure.

Remediation

Users are advised to contact the vendor for updates.

Added: Dec 8, 2025, 8:22 AM
Updated: Dec 8, 2025, 8:22 AM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
0.8
exploitability
4.4
remediation
7.7
relevance
1.4
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.