https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-59711.htmlhttps://patchthecve.com/cve/CVE-2025-59711.htmlFri, 24 Jul 2026 21:10:00 +0000HIGH 8.3: An issue was discovered in Biztalk360 before 11.5. Because of mishandling of user-provided input in an upload mechanism, an authenticated attacker is able to write files outside of the destination directory and/or coerce an authentication from the service, aka Directory Traversal.https://patchthecve.com/cve/CVE-2025-59710.htmlhttps://patchthecve.com/cve/CVE-2025-59710.htmlFri, 24 Jul 2026 21:10:00 +0000HIGH 8.8: An issue was discovered in Biztalk360 before 11.5. Because of incorrect access control, any user is able to request the loading a DLL file. During the loading, a method is called. An attacker can craft a malicious DLL, upload it to the server, and use it to achieve remote code execution on the servehttps://patchthecve.com/cve/CVE-2025-59709.htmlhttps://patchthecve.com/cve/CVE-2025-59709.htmlFri, 24 Jul 2026 21:10:00 +0000MEDIUM 6.8: An issue was discovered in Biztalk360 through 11.5. because of mishandling of user-provided input in a path to be read by the server, a Super User attacker is able to read files on the system and/or coerce an authentication from the service, aka Directory Traversal.