← back
CVE-2025-14018highCWE-428

Unquoted Service Path in NetBT Consultancy's e-Fatura

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 7.3epss 0.4%
from disclosure to weapon109 days
Published on NVDDec 22
1st PoC+109d
exploitation probability
0.4%top 64% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries. This issue affects e-Fatura: before 1.2.15.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.