CVE-2025-53473 - CVE House

Status published Medium CVE-2025-53473

Server-side request forgery (SSRF) vulnerability exists n multiple versions of...

6.9 CVSS

Vulnerability Description

Server-side request forgery (SSRF) vulnerability exists n multiple versions of Nimesa Backup and Recovery, If this vulnerability is exploited, unintended requests may be sent to internal servers.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53473

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Nimesa

View All →

CVE-2025-48501

An OS command injection issue exists in Nimesa Backup and...

Critical 9.3

Affected Vendor

Nimesa

View all reports →

Affected Software

Nimesa Backup and Recovery

Vulnerable Versions:

prior to v3.0.2025062305, v2.3, v2.4

Timeline

Official Publish: July 7th, 2025

Last Modified: July 7th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-918

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1213 Data from Information Repositories

Collection

T1005 Data from Local System