Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
he device from the user menu. This could serve as a backdoor to the device, and could lead to a malicious actor being able to upload and overwrite files on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-030-01 - https://www.fda.gov/medical-devices/safety-communications/cybersecurity-vulnerabilities-certain-patient-monitors-contec-and-epsimed-fda-safety-communication
CVE ID: CVE-2025-0627 State: PUBLISHED Published: 2025-04-28T06:00:02.592Z Last Updated: 2025-04-28T16:22:58.409Z Vendors: Unknown Products: WordPress Tag, Category, and Taxonomy Manager Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WordPress Tag, Category, and Taxonomy Manager WordPress plugin before 3.30.0 does not sanitise and escape some of its Widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/30fbe3c5-f190-48e8-a6bb-
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/30fbe3c5-f190-48e8-a6bb-e8d78e001e7f/
CVE ID: CVE-2025-0628 State: PUBLISHED Published: 2025-03-20T10:10:45.400Z Last Updated: 2025-10-15T12:50:05.101Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: berriai Products: berriai/litellm Problem Types: CWE-266 Description: An improper authorization vulnerability exists in the main-latest version of BerriAI/litellm. When a user with the role 'internal_user_viewer' logs into the application, they are provided with an overly privileged API key. This key can be used to access all the admin functionality of the application, including endpoints such as '/users/list' and '/users/get_users'. This vulnerability allows for privilege escalation within the applic
oints such as '/users/list' and '/users/get_users'. This vulnerability allows for privilege escalation within the application, enabling any account to become a PROXY ADMIN. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/6c0e2f75-2d03-42f9-9530-e16a973317fc - https://github.com/berriai/litellm/commit/566d9354aab4215091b2e51ad0333e948125fa1b
CVE ID: CVE-2025-0629 State: PUBLISHED Published: 2025-03-11T06:00:12.568Z Last Updated: 2025-03-11T14:06:41.642Z Vendors: Unknown Products: Coronavirus (COVID-19) Notice Message Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Coronavirus (COVID-19) Notice Message WordPress plugin through 1.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/39c36d6d-5522-422b-b890-524e27e67f7c/
CVE ID: CVE-2025-0630 State: PUBLISHED Published: 2025-02-04T19:43:49.664Z Last Updated: 2025-02-12T20:51:28.515Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Western Telematic Inc Products: Network Power Switch (NPS Series), Console Server (DSM Series), Console Server + PDU Combo Unit (CPM Series) Problem Types: CWE-73 Description: Multiple Western Telematic (WTI) products contain a web interface that is vulnerable to a local file inclusion attack (LFI), where any authenticated user has privileged access to files on the device's filesystem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/ic
tem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-01
CVE ID: CVE-2025-0631 State: PUBLISHED Published: 2025-01-28T18:27:32.084Z Last Updated: 2025-02-06T21:26:17.072Z Vendors: Rockwell Automation Products: PowerFlex 755 Problem Types: CWE-319 Description: A Credential Exposure Vulnerability exists in the above-mentioned product and version. The vulnerability is due to using HTTP resulting in credentials being sent in clear text. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1717.html
CVE ID: CVE-2025-0632 State: PUBLISHED Published: 2025-04-21T05:27:06.090Z Last Updated: 2025-04-28T02:49:47.566Z Vendors: Formulatrix Products: Rock Maker Web Problem Types: CWE-98, CWE-22 Description: Local File Inclusion (LFI) vulnerability in a Render function of Formulatrix Rock Maker Web (RMW) allows a remote attacker to obtain sensitive data via arbitrary code execution. A malicious actor could execute malicious scripts to automatically download configuration files in known locations to exfiltrate data including credentials, and with no rate limiting a malicious actor could enumerate the filesystem of the host machine and potentially lead to full host compromise. This issue affects Ro
r could enumerate the filesystem of the host machine and potentially lead to full host compromise. This issue affects Rock Maker Web: from 3.2.1.1 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.formulatrix.com/downloads/apps/repository/rockmaker/ - https://formulatrix.com/downloads/apps/repository/rockmaker/RockMaker%20V3/3.18/3.18.4.7/RockMakerWeb_3.18.4.7_setup.exe - https://formulatrix.com/downloads/docs/cve/RockMaker/CVE-2025-0632_Security_Bulletin.pdf
CVE ID: CVE-2025-0633 State: PUBLISHED Published: 2025-02-19T07:01:22.478Z Last Updated: 2025-02-19T21:15:54.695Z Vendors: iniparser Products: iniparser Problem Types: CWE-122 Description: Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/iniparser/iniparser/-/issues/177
CVE ID: CVE-2025-0634 State: PUBLISHED Published: 2025-06-30T01:44:57.595Z Last Updated: 2025-06-30T13:55:23.678Z Vendors: Samsung Open Source Products: rLottie Problem Types: CWE-416 Description: Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Samsung/rlottie/pull/571
CVE ID: CVE-2025-0635 State: PUBLISHED Published: 2025-01-23T11:07:51.496Z Last Updated: 2025-02-12T20:41:24.321Z Vendors: M-Files Corporation Products: M-Files Server Problem Types: CWE-770 Description: Denial of service condition in M-Files Server in versions before 25.1.14445.5 allows an unauthenticated user to consume computing resources in certain conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://product.m-files.com/security-advisories/cve-2025-0635/
CVE ID: CVE-2025-0636 State: PUBLISHED Published: 2025-10-13T06:26:16.829Z Last Updated: 2025-10-14T13:25:42.989Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Ericsson Products: Site Controller 6610, RAN Compute (all BB versions) Problem Types: CWE-78 Description: EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ericsson.com/en/about-us/security/psirt/cve-2025-0636
CVE ID: CVE-2025-0637 State: PUBLISHED Published: 2025-01-23T15:26:16.067Z Last Updated: 2025-02-12T20:41:26.532Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Beta10 Products: Beta10 Problem Types: CWE-287 Description: It has been found that the Beta10 software does not provide for proper authorisation control in multiple areas of the application. This deficiency could allow a malicious actor, without authentication, to access private areas and/or areas intended for other roles. The vulnerability has been identified at least in the file or path ‘/app/tools.html’. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/i
e or path ‘/app/tools.html’. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/inadequate-access-control-beta10
CVE ID: CVE-2025-0638 State: PUBLISHED Published: 2025-01-22T15:48:44.796Z Last Updated: 2025-02-12T20:41:23.525Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: NLnet Labs Products: Routinator Problem Types: CWE-1286 Description: The initial code parsing the manifest did not check the content of the file names yet later code assumed that it was checked and panicked when encountering illegal characters, resulting in a crash of Routinator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nlnetlabs.nl/downloads/routinator/CVE-2025-0638.txt
CVE ID: CVE-2025-0639 State: PUBLISHED Published: 2025-04-24T07:31:06.117Z Last Updated: 2025-04-24T15:23:17.586Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-770 Description: An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/514507 - https://hackerone.com/reports/2946553
CVE ID: CVE-2025-0640 State: PUBLISHED Published: 2025-09-02T11:48:09.493Z Last Updated: 2025-09-02T13:32:08.987Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Akinsoft Products: OctoCloud Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure.This issue affects OctoCloud: from s1.09.02 before v1.11.01. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0203
CVE ID: CVE-2025-0642 State: PUBLISHED Published: 2025-10-02T12:37:29.648Z Last Updated: 2025-10-02T15:52:06.649Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N) Vendors: PosCube Hardware Software and Consulting Ltd. Co. Products: Assist Problem Types: CWE-798, CWE-639 Description: Use of Hard-coded Credentials, Authorization Bypass Through User-Controlled Key vulnerability in PosCube Hardware Software and Consulting Ltd. Co. Assist allows Excavation, Authentication Bypass.This issue affects Assist: through 10.02.2025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0309
CVE ID: CVE-2025-0643 State: PUBLISHED Published: 2025-11-20T13:26:16.317Z Last Updated: 2025-11-20T19:46:50.455Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Narkom Communication and Software Technologies Trade Ltd. Co. Products: Pyxis Signage Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS.This issue affects Pyxis Signage: through 31012025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0404
CVE ID: CVE-2025-0645 State: PUBLISHED Published: 2025-11-20T13:33:38.885Z Last Updated: 2025-11-20T19:33:45.313Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Narkom Communication and Software Technologies Trade Ltd. Co. Products: Pyxis Signage Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Pyxis Signage: through 31012025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0404
CVE ID: CVE-2025-0646 State: REJECTED Published: N/A Last Updated: 2025-07-09T22:15:58.479Z Description: No description available.
CVE ID: CVE-2025-0648 State: PUBLISHED Published: 2025-01-23T11:06:19.319Z Last Updated: 2025-02-17T12:16:22.400Z Vendors: M-Files Corporation Products: M-Files Server Problem Types: CWE-248 Description: Unexpected server crash in database driver in M-Files Server before 25.1.14445.5 and before 24.8 LTS SR3 allows a highly privileged attacker to cause denial of service via configuration change. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://product.m-files.com/security-advisories/cve-2025-0648/
CVE ID: CVE-2025-0649 State: PUBLISHED Published: 2025-05-06T20:20:02.345Z Last Updated: 2025-05-06T20:38:57.927Z Vendors: Google Products: Tensorflow Problem Types: CWE-121 Description: Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/tensorflow/serving/commit/6cb013167d13f2ed3930aabb86dbc2c8c53f5adf
CVE ID: CVE-2025-0650 State: PUBLISHED Published: 2025-01-23T16:34:31.390Z Last Updated: 2025-11-20T07:25:53.629Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Fast Datapath for Red Hat Enterprise Linux 8, Fast Datapath for Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-284 Description: A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual mac
t on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:1083 - https://access.redhat.com/errata/RHSA-2025:1084 - https://access.redhat.com/errata/RHSA-2025:1085 - https://access.redhat.com/errata/RHSA-2025:1086 - https://access.redhat.com/errata/RHSA-2025:1087 - https://access.redhat.com/errata/RHSA-2025:1088 - https://access.redhat.com/errata/RHSA-2025:1089 - https://access.redhat.com/errata/RHSA-2025:1090 - https://access.redhat.com/errata/RHSA-202
.com/errata/RHSA-2025:1089 - https://access.redhat.com/errata/RHSA-2025:1090 - https://access.redhat.com/errata/RHSA-2025:1091 - https://access.redhat.com/errata/RHSA-2025:1092 - https://access.redhat.com/errata/RHSA-2025:1093 - https://access.redhat.com/errata/RHSA-2025:1094 - https://access.redhat.com/errata/RHSA-2025:1095 - https://access.redhat.com/errata/RHSA-2025:1096 - https://access.redhat.com/errata/RHSA-2025:1097 - https://access.redhat.com/security/cve/CVE-2025-0650 - https://bugzilla.redhat.com/show_bug.cgi?id=2339537 - https://www.openwall.com/lists/oss-security/2025/01/22/5
CVE ID: CVE-2025-0651 State: PUBLISHED Published: 2025-01-22T17:34:16.705Z Last Updated: 2025-02-12T20:41:23.901Z Vendors: Cloudflare Products: WARP Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation. User with a low system privileges can create a set of symlinks inside the C:\ProgramData\Cloudflare\warp-diag-partials folder. After triggering the 'Reset all settings" option the WARP service will delete the files that the symlink was pointing to. Given the WARP service operates with System privileges this might lead to deleting files owned by the System user. This issue affects WARP: before 2024.12.492.0. Addi
ivileges this might lead to deleting files owned by the System user. This issue affects WARP: before 2024.12.492.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://developers.cloudflare.com/warp-client/
CVE ID: CVE-2025-0652 State: PUBLISHED Published: 2025-03-13T05:55:59.744Z Last Updated: 2025-03-14T18:04:47.874Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2 could allow unauthorized users to access confidential information intended for internal use only. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/514532 - https://hackerone.com/reports/2
A ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/514532 - https://hackerone.com/reports/2947863
CVE ID: CVE-2025-0654 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:36.992Z Description: No description available.
CVE ID: CVE-2025-0655 State: REJECTED Published: 2025-03-20T10:11:12.681Z Last Updated: 2025-04-15T15:57:29.661Z Description: No description available.
CVE ID: CVE-2025-0656 State: PUBLISHED Published: 2025-09-01T14:23:54.041Z Last Updated: 2025-09-02T19:08:35.513Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Concert Software Problem Types: CWE-79 Description: IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7243699
CVE ID: CVE-2025-0659 State: PUBLISHED Published: 2025-01-28T15:16:38.188Z Last Updated: 2025-01-28T16:21:57.505Z Vendors: Rockwell Automation Products: DataEdgePlatform DataMosaix™ Private Cloud Problem Types: CWE-200 Description: A path traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character sequence in the body of the vulnerable endpoint, it is possible to overwrite files outside of the intended directory. A threat actor with admin privileges could leverage this vulnerability to overwrite reports including user projects. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.
ncluding user projects. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1715.html
CVE ID: CVE-2025-0660 State: PUBLISHED Published: 2025-03-10T20:57:57.707Z Last Updated: 2025-03-11T15:38:49.747Z Vendors: Concrete CMS Products: Concrete CMS Problem Types: CWE-20 Description: Concrete CMS versions 9.0.0 through 9.3.9 are affected by a stored XSS in Folder Function.The "Add Folder" functionality lacks input sanitization, allowing a rogue admin to inject XSS payloads as folder names. The Concrete CMS security team gave this vulnerability a CVSS 4.0 Score of 4.8 with vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N. Versions below 9 are not affected. Thanks, Alfin Joseph for reporting. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
e not affected. Thanks, Alfin Joseph for reporting. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.concretecms.org/9-x/developers/introduction/version-history/940-release-notes - https://github.com/concretecms/concretecms/pull/12454 - https://github.com/concretecms/bedrock/pull/370
CVE ID: CVE-2025-0661 State: PUBLISHED Published: 2025-02-13T06:58:04.120Z Last Updated: 2025-02-13T14:52:26.806Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: detheme Products: DethemeKit for Elementor Problem Types: CWE-639 Description: The DethemeKit For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the duplicate_post() function due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, draft, or scheduled posts that they should not hav
l access and above, to extract data from password protected, private, draft, or scheduled posts that they should not have access to by duplicating the post. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1e2c937c-1ff8-4bcc-913b-83bade37d754?source=cve - https://plugins.trac.wordpress.org/changeset/3236114/dethemekit-for-elementor/trunk/admin/includes/dep/admin-helper.php
CVE ID: CVE-2025-0662 State: PUBLISHED Published: 2025-01-30T04:49:56.482Z Last Updated: 2025-02-07T17:02:55.076Z Vendors: FreeBSD Products: FreeBSD Problem Types: CWE-122 Description: In some cases, the ktrace facility will log the contents of kernel structures to userspace. In one such case, ktrace dumps a variable-sized sockaddr to userspace. There, the full sockaddr is copied, even when it is shorter than the full size. This can result in up to 14 uninitialized bytes of kernel memory being copied out to userspace. It is possible for an unprivileged userspace program to leak 14 bytes of a kernel heap allocation to userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
leak 14 bytes of a kernel heap allocation to userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-SA-25:04.ktrace.asc
CVE ID: CVE-2025-0663 State: PUBLISHED Published: 2025-09-23T16:58:06.589Z Last Updated: 2025-09-25T16:13:15.305Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: WSO2 Products: WSO2 Open Banking IAM, WSO2 Identity Server as Key Manager, WSO2 Identity Server Description: A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Adaptive Authentication. A single cryptographic key is used across all tenants to sign authentication cookies, allowing a privileged user in one tenant to forge authentication cookies for users in other tenants. Because the Auto-Login feature is enabled by default, this flaw ma
ge authentication cookies for users in other tenants. Because the Auto-Login feature is enabled by default, this flaw may allow an attacker to gain unauthorized access and potentially take over accounts in other tenants. Successful exploitation requires access to Adaptive Authentication functionality, which is typically restricted to high-privileged users. The vulnerability is only exploitable when Auto-Login is enabled, reducing its practical impact in deployments where the feature is disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-3864/
CVE ID: CVE-2025-0664 State: PUBLISHED Published: 2025-07-21T07:08:24.915Z Last Updated: 2025-07-21T15:18:14.602Z Vendors: Trellix Products: Trellix Endpoint Security (HX) Agent Problem Types: CWE-94 Description: A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library. This may impair endpoint defenses and allow the attacker to achieve code execution with SYSTEM-level privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://thrive.trellix.com/s/article/000014450