Back to Database
Status published
High
CVE-2025-34185
Ilevia EVE X1 Server 4.7.18.0.eden Unauthenticated File Disclosure
Vulnerability Description
Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a pre-authentication file disclosure vulnerability via the 'db_log' POST parameter. Remote attackers can retrieve arbitrary files from the server, exposing sensitive system information and credentials.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-34185
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Gjoko Krstic of Zero Science Lab
References
More from Ilevia Srl.
View All →CVE-2025-34519
Ilevia EVE X1 Server 4.7.18.0.eden Insecure Hashing Algorithm
High
8.2
CVE-2025-34518
Ilevia EVE X1 Server 4.7.18.0.eden Relative Path Traversal
High
8.7
CVE-2025-34517
Ilevia EVE X1 Server 4.7.18.0.eden Absolute Path Traversal
High
8.7
CVE-2025-34516
Ilevia EVE X1 Server 4.7.18.0.eden Use of Default Credentials
Critical
9.3
CVE-2025-34515
Ilevia EVE X1 Server 4.7.18.0.eden Root Privilege Escalation
Critical
9.3
Affected Vendor
Ilevia Srl.
View all reports →Affected Software
EVE X1 Server
Vulnerable Versions:
0
Timeline
Official Publish:
September 16th, 2025
Last Modified:
May 25th, 2026
Added to House:
July 22nd, 2026