Skip to content
OpenAdvisories

Vendor

Riverbed Technology

2 known vulnerabilities.

Products

SteelCentral NetExpress 1 SteelCentral NetProfiler 1 SteelHead VCX 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-34112 Public exploit

    Riverbed SteelCentral NetProfiler / NetExpress 10.8.7 RCE

    An authenticated multi-stage remote code execution vulnerability exists in Riverbed SteelCentral NetProfiler and NetExpress 10.8.7 virtual appliances. A SQL injection vulnerability in the '/api/common/1.0/login' endpoint can be exploited to create a new user …

    Riverbed Technology SteelCentral NetProfiler SteelCentral NetExpress
  • High 7.1
    CVE-2025-34098 Public exploit

    Riverbed SteelHead VCX Authenticated Arbitrary File Read via Log Filter Injection

    A path traversal vulnerability exists in Riverbed SteelHead VCX appliances (confirmed in VCX255U 9.6.0a) due to improper input validation in the log filtering functionality exposed via the management web interface. An authenticated attacker can exploit this f…

    Riverbed Technology SteelHead VCX