{"metadata": {"vulnerability": "CVE-2025-68391", "count": 18, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 8}, "linked_omitted": 0}, "data": [{"timestamp": "2025-12-16T20:34:33.172Z", "date_only": false, "value": "2025-12-16T20:34:33.172Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-68391", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-30T03:55:00Z", "date_only": false, "value": "2026-10-30T03:55:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cert.pl/en/posts/2026/10/CVE-2025-68391", "record": "CVE-2025-68391", "field": "creation_timestamp", "uuid": "62ceb89a-d0e1-45bd-8df8-8ea7975bde74", "url": "https://cert.pl/en/posts/2026/10/CVE-2025-68391"}, {"timestamp": "2026-10-30T11:37:29.261Z", "date_only": false, "value": "2026-10-30T11:37:29.261Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-68391", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T11:37:29.261Z", "date_only": false, "value": "2026-10-30T11:37:29.261Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CERT-PL", "record": "CVE-2025-68391", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T12:11:35.846Z", "date_only": false, "value": "2026-10-30T12:11:35.846314Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117529791386456429", "record": "CVE-2025-68391", "field": "creation_timestamp", "uuid": "4051c761-78db-4bf4-a722-023a5b361a56", "content": "CVE-2025-68391 Arbitrary File Upload in Protectel ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. Any user is able to upload arbitrary file and override existing files in a temporary folder. This vulnerability might lead to execution of embedded JavaScript scripts when an authenticated user tries to download the uploaded file. This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67\nhttps://www.cve.org/CVERecord?id=CVE-2025-68391https://protectel.arketeam.com/https://cert.pl/en/posts/2026/10/CVE-2025-68391/#arketeam #ARKETEAM #PROTECTELMAJ #BDF#CVE_2025_68391#bot", "url": "https://infosec.exchange/users/cve/statuses/117529791386456429"}, {"timestamp": "2026-10-30T12:12:18.335Z", "date_only": false, "value": "2026-10-30T12:12:18.335408Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117529794033445581", "record": "CVE-2025-68391", "field": "creation_timestamp", "uuid": "479ec87d-745d-47bf-8dc6-74854429837b", "content": "CVE-2025-68392 Incorrect authorization in Protectel ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved for admin users by forging direct requests to a specific endpoint. This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67\nhttps://www.cve.org/CVERecord?id=CVE-2025-68392https://protectel.arketeam.com/https://cert.pl/en/posts/2026/10/CVE-2025-68391/#arketeam #ARKETEAM #PROTECTELMAJ #BDF#CVE_2025_68392#bot", "url": "https://infosec.exchange/users/cve/statuses/117529794033445581"}, {"timestamp": "2026-10-30T12:12:56.607Z", "date_only": false, "value": "2026-10-30T12:12:56.607083Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117529796672474153", "record": "CVE-2025-68391", "field": "creation_timestamp", "uuid": "06892458-8d48-481e-8119-3c22a2d12a23", "content": "CVE-2025-68393 SQL Injection in Protectel ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization of input provided by a low privileged user into \"Utilisateur\" parameter allows for SQL Injection attacks.This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67\nhttps://www.cve.org/CVERecord?id=CVE-2025-68393https://protectel.arketeam.com/https://cert.pl/en/posts/2026/10/CVE-2025-68391#arketeam #ARKETEAM #PROTECTELMAJ #BDF#CVE_2025_68393#bot", "url": "https://infosec.exchange/users/cve/statuses/117529796672474153"}, {"timestamp": "2026-10-30T12:13:37.241Z", "date_only": false, "value": "2026-10-30T12:13:37.241013Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117529799334707144", "record": "CVE-2025-68391", "field": "creation_timestamp", "uuid": "652c9eae-6076-4312-b2a0-8c969a9643bc", "content": "CVE-2025-68394 SQL Injection in Protectel ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization of input provided by a low privileged user into \"profilInput\" parameter allows for SQL Injection attacks.This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67\nhttps://www.cve.org/CVERecord?id=CVE-2025-68394https://protectel.arketeam.com/https://cert.pl/en/posts/2026/10/CVE-2025-68391#arketeam #ARKETEAM #PROTECTELMAJ #BDF#CVE_2025_68394#bot", "url": "https://infosec.exchange/users/cve/statuses/117529799334707144"}, {"timestamp": "2026-10-30T12:14:17.505Z", "date_only": false, "value": "2026-10-30T12:14:17.505832Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117529801978261374", "record": "CVE-2025-68391", "field": "creation_timestamp", "uuid": "a690da9e-c004-4891-ae19-d11698a1e0dd", "content": "CVE-2025-68395 Stored XSS in Protectel ARKETEAM Protectel modules PROTECTELMAJ and BDF  contain a note editor module vulnerable to Stored XSS. A low privileged attacker can inject arbitrary HTML and JS into notes, which will be rendered/executed when a user visits this module.This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67\nhttps://www.cve.org/CVERecord?id=CVE-2025-68395https://protectel.arketeam.com/https://cert.pl/en/posts/2026/10/CVE-2025-68391#arketeam #ARKETEAM #PROTECTELMAJ #BDF#CVE_2025_68395#bot", "url": "https://infosec.exchange/users/cve/statuses/117529801978261374"}, {"timestamp": "2026-10-30T12:16:32Z", "date_only": false, "value": "2026-10-30T12:16:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GPMV-MC28-9PQ5", "record": "GHSA-GPMV-MC28-9PQ5", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-30T12:16:32.063Z", "date_only": false, "value": "2026-10-30T12:16:32.063", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-68391", "record": "FKIE_CVE-2025-68391", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T12:31:15Z", "date_only": false, "value": "2026-10-30T12:31:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GPMV-MC28-9PQ5", "record": "GHSA-GPMV-MC28-9PQ5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T12:31:15Z", "date_only": false, "value": "2026-10-30T12:31:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GPMV-MC28-9PQ5", "record": "GHSA-GPMV-MC28-9PQ5", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T15:26:38.400Z", "date_only": false, "value": "2026-10-30T15:26:38.400540Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-68391", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-30T15:26:38.400Z", "date_only": false, "value": "2026-10-30T15:26:38.400540Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-68391", "record": "FKIE_CVE-2025-68391", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-30T15:26:48.082Z", "date_only": false, "value": "2026-10-30T15:26:48.082Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-68391", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-30T15:26:48.082Z", "date_only": false, "value": "2026-10-30T15:26:48.082Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-68391", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-04T20:10:00.263Z", "date_only": false, "value": "2026-11-04T20:10:00.263", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-68391", "record": "FKIE_CVE-2025-68391", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T16:29:00.640Z", "anchors": {"origin": {"timestamp": "2026-10-30T11:37:29.261Z", "date_only": false, "value": "2026-10-30T11:37:29.261Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-68391", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-30T11:37:29.261Z", "date_only": false, "value": "2026-10-30T11:37:29.261Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-68391", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1227091.379497, "hours": 340.8587165269445, "days": 14.202446521956018, "min_seconds": 1227091.379497, "max_seconds": 1227091.379497, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-30T11:37:29.261Z", "date_only": false, "value": "2026-10-30T11:37:29.261Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-68391", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T16:29:00.640Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}