CVE-2025-9588

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountain Archiving Services Inc. EnVision allows Command Injection.This issue affects enVision: before 250563.
References
Link Resource
https://www.usom.gov.tr/bildirim/tr-25-0285 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:ironmountain:envision:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

History

02 Oct 2025, 14:24

Type Values Removed Values Added
First Time Ironmountain envision
Linux linux Kernel
Linux
Ironmountain
CPE cpe:2.3:a:ironmountain:envision:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
References () https://www.usom.gov.tr/bildirim/tr-25-0285 - () https://www.usom.gov.tr/bildirim/tr-25-0285 - Third Party Advisory

23 Sep 2025, 08:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-09-23 08:15

Updated : 2025-10-02 14:24


NVD link : CVE-2025-9588

Mitre link : CVE-2025-9588

CVE.ORG link : CVE-2025-9588


JSON object : View

Products Affected

ironmountain

  • envision

linux

  • linux_kernel
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')