ESET PROTECT and Inspect
CVE-2025-8352: Denial-of-service vulnerability in ESET PROTECT On-Prem
Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased resource consumption (CPU and RAM), leading to conditions for a Denial-of-Service attack.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityMEDIUMCVSS 4.0 6.9
EPSS0.27%Chance of exploitation in 30 days
Public exploitNot tracked
FixAvailable
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| ESET PROTECT On-Prem 0 to 12.1.9.0 (with Web Console 12.1.252.0) | 12.1.11.0 (using Web Console 12.1.260.0 on Apache Tomcat 9.0.107) or later |
| ESET PROTECT On-Prem 0 to 12.0.13.0 (with Web Console 12.0.289.0) | 12.0.15.0 (using Web Console 12.0.306.0 on Apache Tomcat 9.0.107) or later |
| ESET PROTECT On-Prem 0 to 11.1.16.0 (with Web Console 11.1.149.0) | 11.1.18.0 (using Web Console 11.1.159.0 on Apache Tomcat 9.0.107) or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased resource consumption (CPU and RAM), leading to conditions for a Denial-of-Service attack.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.