What is the CVSS score of CVE-2025-63365?

CVE-2025-63365 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.2%.

Which versions of Epub File Reader are affected by CVE-2025-63365?

SoftSea EPUB File Reader 1.0.0.0 contains a directory traversal vulnerability that could allow attackers to access unauthorized files on affected systems through maliciously crafted EPUB documents.

How to fix or mitigate CVE-2025-63365?

Within 24 hours: Identify all systems running SoftSea EPUB File Reader 1.0.0.0 and restrict file processing to trusted sources only. Within 7 days: Implement network segmentation to isolate affected systems and disable EPUB processing functionality if not business-critical. Within 30 days: Monitor vendor communications for patch availability and establish a process to apply updates immediately upon release; consider alternative EPUB readers if vendor support is uncertain.

Epub File Reader CVE-2025-63365

EUVD-2025-200091 HIGH

Path Traversal (CWE-22)

2025-12-01 cve@mitre.org

Path Traversal Epub File Reader

7.1

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.1 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 13:34 euvd

EUVD-2025-200091

Analysis Generated

Mar 15, 2026 - 13:34 vuln.today

CVE Published

Dec 01, 2025 - 19:15 nvd

HIGH 7.1

DescriptionCVE.org

SoftSea EPUB File Reader 1.0.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the EPUB file processing component, specifically in the functionality responsible for extracting and handling EPUB archive contents.