Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-42986 State: PUBLISHED Published: 2025-07-08T00:38:32.873Z Last Updated: 2025-07-08T18:13:40.043Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP NetWeaver and ABAP Platform Problem Types: CWE-862 Description: Due to a missing authorization check in an obsolete RFC enabled function module in SAP BASIS, an authenticated low-privileged attacker could call a Remote Function Call (RFC), potentially accessing restricted system information. This results in low impact on confidentiality, with no impact on integrity or availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sa
grity or availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3626440 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-42987 State: PUBLISHED Published: 2025-06-10T00:11:45.597Z Last Updated: 2025-06-10T15:15:47.066Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: SAP_SE Products: SAP S/4HANA (Manage Processing Rules - For Bank Statement) Problem Types: CWE-862 Description: SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter. Due to missing authorization check, the attacker can edit rules that should be restricted, compromising the integrity of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3596
grity of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3596850 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-42988 State: PUBLISHED Published: 2025-06-10T00:12:00.282Z Last Updated: 2025-06-10T15:26:39.982Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP Business Objects Business Intelligence Platform Problem Types: CWE-918 Description: Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no impact on integrity and availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment:
F. It has no impact on integrity and availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3585545 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-42989 State: PUBLISHED Published: 2025-06-10T00:12:16.278Z Last Updated: 2025-06-11T04:01:27.213Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: SAP_SE Products: SAP NetWeaver Application Server for ABAP Problem Types: CWE-862 Description: RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation the attacker could critically impact both integrity and availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3600840 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-42990 State: PUBLISHED Published: 2025-06-10T00:12:33.233Z Last Updated: 2025-06-10T15:15:39.014Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: SAP_SE Products: SAPUI5 applications Problem Types: CWE-79 Description: Unprotected SAPUI5 applications allow an attacker with basic privileges to inject malicious HTML code into a webpage, with the goal of redirecting users to the attacker controlled URL. This issue could impact the integrity of the application. Confidentiality or Availability are not impacted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3601169 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-42991 State: PUBLISHED Published: 2025-06-10T00:12:53.600Z Last Updated: 2025-06-10T15:15:32.154Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: SAP_SE Products: SAP S/4HANA (Bank Account Application) Problem Types: CWE-862 Description: SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/
he availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3608058 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-42992 State: PUBLISHED Published: 2025-07-08T00:38:42.352Z Last Updated: 2025-07-11T03:55:27.257Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L) Vendors: SAP_SE Products: SAPCAR Problem Types: CWE-266 Description: SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical files and directory permissions without breaking signature validation, resulting in potential privilege escalation. This has high impact on integrity, but low impact on confidentiality and availability of the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
onfidentiality and availability of the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3595143 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-42993 State: PUBLISHED Published: 2025-06-10T00:13:15.633Z Last Updated: 2025-06-11T04:01:28.293Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: SAP_SE Products: SAP S/4HANA (Enterprise Event Enablement) Problem Types: CWE-862 Description: Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an attacker with access to the Inbound Binding Configuration could create an RFC destination and assign an arbitrary high-privilege user. This allows the attacker to consume events via the RFC destination, leading to code execution under the privileges of the assigned high-privilege user. While the vulnerabili
C destination, leading to code execution under the privileges of the assigned high-privilege user. While the vulnerability has a low impact on Availability, it significantly poses a high risk to both Confidentiality and Integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3580384 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-42994 State: PUBLISHED Published: 2025-06-10T00:13:29.670Z Last Updated: 2025-11-12T18:21:55.820Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: SAP_SE Products: SAP MDM Server Problem Types: CWE-590 Description: SAP MDM Server ReadString function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly causing high impact on availability with no impact on confidentiality and integrity of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3610006 - https://url.sap/sapsecuritypa
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3610006 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-42995 State: PUBLISHED Published: 2025-06-10T00:13:44.987Z Last Updated: 2025-06-10T15:15:11.986Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: SAP_SE Products: SAP MDM Server Problem Types: CWE-590 Description: SAP MDM Server Read function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly causing high impact on availability with no impact on confidentiality and integrity of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3610006 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-42996 State: PUBLISHED Published: 2025-06-10T00:13:57.561Z Last Updated: 2025-06-10T15:15:05.681Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SAP_SE Products: SAP MDM Server Problem Types: CWE-590 Description: SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without having to re-authenticate giving the ability to access or modify non-sensitive information or consume sufficient resources which could degrade the performance of the server causing low impact on confidentiality, integrity and availibility of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
identiality, integrity and availibility of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3610006 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-42997 State: PUBLISHED Published: 2025-05-13T00:17:32.075Z Last Updated: 2025-05-13T13:55:38.108Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: SAP_SE Products: SAP Gateway Client Problem Types: CWE-732 Description: Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on confidentiality, integrity, and availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/not
ty, integrity, and availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3577300 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-42998 State: PUBLISHED Published: 2025-06-10T00:14:11.037Z Last Updated: 2025-06-10T15:14:57.460Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP Business One Integration Framework Problem Types: CWE-346 Description: The security settings in the SAP Business One Integration Framework are not adequately checked, allowing attackers to bypass the 403 Forbidden error and access restricted pages. This leads to low impact on confidentiality of the application, there is no impact on integrity and availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3594258 - https://url.sap/sap
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3594258 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-42999 State: PUBLISHED Published: 2025-05-13T00:17:43.710Z Last Updated: 2025-10-21T22:55:16.662Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP_SE Products: SAP NetWeaver (Visual Composer development server) Problem Types: CWE-502 Description: SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3604119 - https://url.
t Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3604119 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-43000 State: PUBLISHED Published: 2025-05-13T00:17:59.523Z Last Updated: 2025-05-13T14:06:10.930Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: SAP_SE Products: SAP Business Objects Business Intelligence Platform (PMW) Problem Types: CWE-862 Description: Under certain conditions Promotion Management Wizard (PMW) allows an attacker to access information which would otherwise be restricted.This has High impact on Confidentiality with Low impact on Integrity and Availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3586013 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-43001 State: PUBLISHED Published: 2025-07-08T00:38:50.441Z Last Updated: 2025-07-11T03:55:26.483Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L) Vendors: SAP_SE Products: SAPCAR Problem Types: CWE-266 Description: SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting the archive, leading to privilege escalation. On successful exploitation, an attacker could modify the critical files by tampering with signed archives without breaking the signature, but it has a low impact on the confidentiality and availability of the system. Additional Analyst Note
ng the signature, but it has a low impact on the confidentiality and availability of the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3595143 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-43002 State: PUBLISHED Published: 2025-05-13T00:18:11.352Z Last Updated: 2025-05-13T14:02:42.025Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP S4/HANA (OData meta-data property) Problem Types: CWE-472 Description: SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confidentiality but integrity and availability of the application are not impacted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3227940 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-43003 State: PUBLISHED Published: 2025-05-13T00:18:25.611Z Last Updated: 2025-05-13T14:02:18.513Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: SAP_SE Products: SAP S/4HANA (Private Cloud & On-Premise) Problem Types: CWE-749 Description: SAP S/4 HANA allows an authenticated attacker with user privileges to configure a field not intended for their access and create a custom UI layout displaying this field. On performing this step the attacker could gain access to highly sensitive information. This could cause a high impact on confidentiality and minimal impact on integrity and availability of the application. Additional Analyst Notes: - CIS
on confidentiality and minimal impact on integrity and availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3596033 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-43004 State: PUBLISHED Published: 2025-05-13T00:18:35.364Z Last Updated: 2025-05-13T14:01:59.045Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP Digital Manufacturing (Production Operator Dashboard) Problem Types: CWE-862 Description: Due to a security misconfiguration vulnerability, customers can develop Production Operator Dashboards (PODs) that enable outside users to access customer data when they access these dashboards. Since no mechanisms exist to enforce authentication, malicious unauthenticated users can view non-sensitive customer information. However, this does not affect data integrity or availability. Addit
d users can view non-sensitive customer information. However, this does not affect data integrity or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3571096 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-43005 State: PUBLISHED Published: 2025-05-13T00:18:51.756Z Last Updated: 2025-05-13T14:00:28.905Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP GUI for Windows Problem Types: CWE-256 Description: SAP GUI for Windows allows an unauthenticated attacker to exploit insecure obfuscation algorithms used by the GuiXT application to store user credentials. While this issue does not impact the Integrity or Availability of the application, it may have a Low impact on the Confidentiality of data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3574520 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-43006 State: PUBLISHED Published: 2025-05-13T00:19:01.711Z Last Updated: 2025-05-13T14:00:06.955Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP Supplier Relationship Management (Master Data Management Catalog) Problem Types: CWE-79 Description: SAP Supplier Relationship Management (Master Data Management Catalogue) allows an unauthenticated attacker to execute malicious scripts in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity. Additional Analyst Notes: -
of the application, but it can have some minor impact on its confidentiality and integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3588455 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-43007 State: PUBLISHED Published: 2025-05-13T00:19:18.709Z Last Updated: 2025-05-13T13:58:16.900Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SAP_SE Products: SAP Service Parts Management (SPM) Problem Types: CWE-862 Description: SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on confidentiality, integrity and availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/2719724 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-43008 State: PUBLISHED Published: 2025-05-13T00:19:30.248Z Last Updated: 2025-05-13T13:57:09.498Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: SAP_SE Products: SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal Problem Types: CWE-862 Description: Due to missing authorization check, an unauthorized user can view the files of other company. This might lead to disclosure of personal data of employees. There is no impact on integrity and availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3585992 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-43009 State: PUBLISHED Published: 2025-05-13T00:19:41.795Z Last Updated: 2025-05-13T14:11:47.930Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SAP_SE Products: SAP Service Parts Management (SPM) Problem Types: CWE-862 Description: SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on Confidentiality, integrity and availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/2491817 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-43010 State: PUBLISHED Published: 2025-05-13T00:19:51.184Z Last Updated: 2025-05-13T14:11:28.429Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H) Vendors: SAP_SE Products: SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL)) Problem Types: CWE-94 Description: SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL)) allows an authenticated attacker with SAP standard authorization to execute a certain function module remotely and replace arbitrary ABAP programs, including SAP standard programs. This is due to lack of input validation and no authorization checks. This has low Confidentiality impact but high im
ms. This is due to lack of input validation and no authorization checks. This has low Confidentiality impact but high impact on integrity and availability to the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3600859 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-43011 State: PUBLISHED Published: 2025-05-13T00:20:02.713Z Last Updated: 2025-05-13T14:11:07.306Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: SAP_SE Products: SAP Landscape Transformation (PCL Basis) Problem Types: CWE-862 Description: Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted functionalities or data. This can lead to a high impact on confidentiality with no impact on the integrity or availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3
lability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3591978 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2025-43012 State: PUBLISHED Published: 2025-04-17T15:56:04.085Z Last Updated: 2025-04-18T03:55:43.812Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: JetBrains Products: Toolbox App Problem Types: CWE-77 Description: In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-43013 State: PUBLISHED Published: 2025-04-17T15:56:04.549Z Last Updated: 2025-04-17T18:02:40.928Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L) Vendors: JetBrains Products: Toolbox App Problem Types: CWE-319 Description: In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-43014 State: PUBLISHED Published: 2025-04-17T15:56:04.945Z Last Updated: 2025-04-17T18:01:48.899Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: JetBrains Products: Toolbox App Problem Types: CWE-304 Description: In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-43015 State: PUBLISHED Published: 2025-04-17T15:56:05.386Z Last Updated: 2025-04-17T17:23:40.313Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: JetBrains Products: RubyMine Problem Types: CWE-1188 Description: In JetBrains RubyMine before 2025.1 remote Interpreter overwrote ports to listen on all interfaces Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-43016 State: PUBLISHED Published: 2025-04-25T14:32:32.399Z Last Updated: 2025-04-25T15:27:30.767Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: JetBrains Products: Rider Problem Types: CWE-23 Description: In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-43017 State: PUBLISHED Published: 2025-10-28T20:40:19.040Z Last Updated: 2025-10-30T03:56:02.832Z Vendors: HP Inc. Products: HP ThinPro 8.1 Problem Types: CWE-250 Description: HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_13164593-13164617-16/hpsbhf04066