deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-3704
Published: 2025-05-27
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DBAR Productions Volunteer Sign Up Sheets pta-volunteer-sign-up-sheets allows Stored XSS.This issue affects Volunteer Sign Up Sheets: from n/a through < 5.5.5.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/pta-volunteer-sign-up-sheets/vulnerability/wordpress-volunteer-sign-up-sheets-plugin-5-5-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-48383
Published: 2025-05-27
Description: Django-Select2 is a Django integration for Select2. Prior to version 8.4.1, instances of HeavySelect2Mixin subclasses like the ModelSelect2MultipleWidget and ModelSelect2Widget can leak secret access tokens across requests. This can allow users to access restricted query sets and restricted data. This issue has been patched in version 8.4.1.
CVSS Score: 8.2 (HIGH)
CWE: CWE-402, CWE-918
References: https://github.com/codingjoe/django-select2/commit/e5f41e6edba004d35f94915ff5e2559f44853412; https://github.com/codingjoe/django-select2/security/advisories/GHSA-wjrh-hj83-3wh7
CVE: CVE-2025-5245
Published: 2025-05-27
Description: A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119
References: https://sourceware.org/bugzilla/attachment.cgi?id=16004; https://sourceware.org/bugzilla/show_bug.cgi?id=32829; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a
CVE: CVE-2025-5246
Published: 2025-05-27
Description: A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /hms/admin/query-details.php. The manipulation of the argument adminremark leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/snkercyber/CVE/issues/5; https://vuldb.com/?ctiid.310348; https://vuldb.com/?id.310348
CVE: CVE-2025-5247
Published: 2025-05-27
Description: A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287
References: https://github.com/A7cc/cve/issues/5; https://vuldb.com/?ctiid.310349; https://vuldb.com/?id.310349
CVE: CVE-2022-0003
Published: 2025-05-27
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-21138
Published: 2025-05-27
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2024-56193
Published: 2025-05-27
Description: There is a possible disclosure of Bluetooth adapter details due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2025-05-01
CVE: CVE-2025-27700
Published: 2025-05-27
Description: There is a possible bypass of carrier restrictions due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-693
References: https://source.android.com/security/bulletin/pixel/2025-05-01
CVE: CVE-2025-27701
Published: 2025-05-27
Description: In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after calling slice_map_array(). Later this values will be derefenced without prior NULL check, which can lead to local Temporary DoS or OOB Read, leading to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://source.android.com/security/bulletin/pixel/2025-05-01
CVE: CVE-2025-48370
Published: 2025-05-27
Description: auth-js is an isomorphic Javascript library for Supabase Auth. Prior to version 2.70.0, the library functions getUserById, deleteUser, updateUserById, listFactors and deleteFactor did not require the user supplied values to be valid UUIDs. This could lead to a URL path traversal, resulting in the wrong API function being called. Implementations that follow security best practice and validate user controlled inputs, such as the userId are not affected by this. This issue has been patched in version 2.70.0.
CWE: CWE-22, CWE-287
References: https://github.com/supabase/auth-js/commit/1bcb76e479e51cd9bca2d7732d0bf3199e07a693; https://github.com/supabase/auth-js/pull/1063; https://github.com/supabase/auth-js/security/advisories/GHSA-8r88-6cj9-9fh5
CVE: CVE-2025-5248
Published: 2025-05-27
Description: A vulnerability, which was classified as critical, was found in PHPGurukul Company Visitor Management System 1.0. Affected is an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/zzb1388/zzb1/issues/8; https://phpgurukul.com/; https://vuldb.com/?ctiid.310350
CVE: CVE-2024-49196
Published: 2025-05-27
Description: An issue was discovered in the GPU in Samsung Mobile Processor Exynos 1480 and 2400. Type confusion leads to a Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-843
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-49196/
CVE: CVE-2025-22377
Published: 2025-05-27
Description: An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. A Heap-based Out-of-Bounds Write exists in the GPRS protocol implementation because of a mismatch between the actual length of the payload and the length declared within the payload.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-22377/
CVE: CVE-2025-23247
Published: 2025-05-27
Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this vulnerability might lead to arbitrary code execution.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-130
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5643; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2151
CVE: CVE-2025-48057
Published: 2025-05-27
Description: Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate() function can be tricked into incorrectly treating certificates as valid. This allows an attacker to send a malicious certificate request that is then treated as a renewal of an already existing certificate, resulting in the attacker obtaining a valid certificate that can be used to impersonate trusted nodes. This only occurs when Icinga 2 is built with OpenSSL older than version 1.1.0. This issue has been patched in versions 2.12.12, 2.13.12, and 2.14.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-296
References: https://github.com/Icinga/icinga2/commit/34c93a2542bbe4e9886d15bc17ec929ead1aa152; https://github.com/Icinga/icinga2/commit/4023128be42b18a011dda71ddee9ca79955b89cb; https://github.com/Icinga/icinga2/commit/60f75f4a3d5cbb234eb3694ba7e9076a1a5b8776
CVE: CVE-2025-5249
Published: 2025-05-27
Description: A vulnerability has been found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-category.php. The manipulation of the argument Category leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/Schatten-42/MyCVE/issues/9; https://phpgurukul.com/; https://vuldb.com/?ctiid.310351
CVE: CVE-2025-5250
Published: 2025-05-27
Description: A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/Schatten-42/MyCVE/issues/10; https://phpgurukul.com/; https://vuldb.com/?ctiid.310352
CVE: CVE-2025-5251
Published: 2025-05-27
Description: A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/Schatten-42/MyCVE/issues/11; https://phpgurukul.com/; https://vuldb.com/?ctiid.310353
CVE: CVE-2024-49197
Published: 2025-05-27
Description: An issue was discovered in Wi-Fi in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000. Lack of a boundary check in STOP_KEEP_ALIVE_OFFLOAD leads to out-of-bounds access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-49197/
CVE: CVE-2025-45475
Published: 2025-05-27
Description: maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link Management.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://www.yuque.com/morysummer/vx41bz/dzidfm8vn2h5k1lb
CVE: CVE-2025-5252
Published: 2025-05-27
Description: A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-subadmin.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/Schatten-42/MyCVE/issues/12; https://phpgurukul.com/; https://vuldb.com/?ctiid.310354
CVE: CVE-2024-13966
Published: 2025-05-27
Description: ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords (located under the Attendance Settings tab as "Self-Password").
CVSS Score: 7.3 (HIGH)
CWE: CWE-1393
References: https://krashconsulting.com/fury-of-fingers-biotime-rce/; https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-148-01.json; https://www.cve.org/CVERecord?id=CVE-2024-13966
CVE: CVE-2025-2872
Published: 2025-05-27
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-47577. Reason: This candidate is a reservation duplicate of CVE-2025-47577. Notes: All CVE users should reference CVE-2025-47577 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-45529
Published: 2025-05-27
Description: An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to /cms/templates/templatesAssetsEditor.
CVSS Score: 7.1 (HIGH)
CWE: CWE-552
References: https://gist.github.com/sec-Kode/000fbab6dc649888bc196e76a4076b57; https://github.com/sec-Kode/cve/blob/main/cve2.md
CVE: CVE-2025-46173
Published: 2025-05-27
Description: code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) via the name field in the feedback form.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/pruthuraut/CVE-2025-46173; https://www.invicti.com/learn/blind-cross-site-scripting/
CVE: CVE-2025-5063
Published: 2025-05-27
Description: Use after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html; https://issues.chromium.org/issues/411573532
CVE: CVE-2025-5064
Published: 2025-05-27
Description: Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html; https://issues.chromium.org/issues/40058068
CVE: CVE-2025-5065
Published: 2025-05-27
Description: Inappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-451
References: https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html; https://issues.chromium.org/issues/40059071
CVE: CVE-2025-5066
Published: 2025-05-27
Description: Inappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-451
References: https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html; https://issues.chromium.org/issues/356658477
CVE: CVE-2025-5067
Published: 2025-05-27
Description: Inappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-290
References: https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html; https://issues.chromium.org/issues/40075024
CVE: CVE-2025-5198
Published: 2025-05-27
Description: A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of table cells. The only known potential exploit is if the script is included in the name of a Kubernetes “Role” object* that is applied to a secured cluster. This object can be used by a user with access to the cluster or through a compromised third-party product.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-79
References: https://access.redhat.com/security/cve/CVE-2025-5198; https://bugzilla.redhat.com/show_bug.cgi?id=2368568; https://github.com/stackrox/stackrox/pull/13336
CVE: CVE-2025-5222
Published: 2025-05-27
Description: A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: https://access.redhat.com/errata/RHSA-2025:11888; https://access.redhat.com/errata/RHSA-2025:12083; https://access.redhat.com/errata/RHSA-2025:12331
CVE: CVE-2025-5278
Published: 2025-05-27
Description: A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-121
References: https://access.redhat.com/security/cve/CVE-2025-5278; https://bugzilla.redhat.com/show_bug.cgi?id=2368764; https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633
CVE: CVE-2025-5279
Published: 2025-05-27
Description: When the Amazon Redshift Python Connector is configured with the BrowserAzureOAuth2CredentialsProvider plugin, the driver skips the SSL certificate validation step for the Identity Provider. An insecure connection could allow an actor to intercept the token exchange process and retrieve an access token.

This issue has been addressed in driver version 2.1.7. Users should upgrade to address this issue and ensure any forked or derivative code is patched to incorporate the new fixes.
CWE: CWE-295
References: https://aws.amazon.com/security/security-bulletins/AWS-2025-011/; https://github.com/aws/amazon-redshift-python-driver/releases/tag/v2.1.7; https://github.com/aws/amazon-redshift-python-driver/security/advisories/GHSA-r244-wg5g-6w2r
CVE: CVE-2025-5280
Published: 2025-05-27
Description: Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html; https://issues.chromium.org/issues/417169470
CVE: CVE-2025-5281
Published: 2025-05-27
Description: Inappropriate implementation in BFCache in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially obtain user information via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html; https://issues.chromium.org/issues/417215501
CVE: CVE-2025-5283
Published: 2025-05-27
Description: Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html; https://issues.chromium.org/issues/419467315; https://lists.debian.org/debian-lts-announce/2025/05/msg00043.html
CVE: CVE-2025-32440
Published: 2025-05-27
Description: NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to /index.php. This issue has been patched in version 25.4.14.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306
References: https://github.com/jokob-sk/NetAlertX/releases/tag/v25.4.14; https://github.com/jokob-sk/NetAlertX/security/advisories/GHSA-h4x5-vr54-vjrx; https://github.com/jokob-sk/NetAlertX/security/advisories/GHSA-h4x5-vr54-vjrx
CVE: CVE-2025-40911
Published: 2025-05-27
Description: Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses.

Leading zeros are used to indicate octal numbers, which can confuse users who are intentionally using octal notation, as well as users who believe they are using decimal notation.

Net::CIDR::Set used code from Net::CIDR::Lite, which had a similar vulnerability CVE-2021-47154.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1287
References: https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/; https://github.com/robrwo/perl-Net-CIDR-Set/commit/be7d91e8446ad8013b08b4be313d666dab003a8a.patch; https://metacpan.org/release/RRWO/Net-CIDR-Set-0.14/changes
CVE: CVE-2022-21150
Published: 2025-05-27
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-21200
Published: 2025-05-27
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2024-11185
Published: 2025-05-27
Description: On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resulting in a breach of VLAN isolation and segmentation boundaries.
CVSS Score: 6.5 (MEDIUM)
References: https://https://www.arista.com/en/support/advisories-notices/security-advisory/21411-security-advisory-0118
CVE: CVE-2024-45094
Published: 2025-05-27
Description: IBM DS8900F and DS8A00 Hardware Management Console (HMC) is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7234276
CVE: CVE-2025-2796
Published: 2025-05-27
Description: On affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific cases. Received duplicate encrypted packets, which should be dropped under normal anti-replay protection, will instead be forwarded due to this vulnerability.

Note: this issue does not affect VXLANSec or MACSec encryption functionality.
CVSS Score: 5.3 (MEDIUM)
References: https://www.arista.com/en/support/advisories-notices/security-advisory/21413-security-advisory-0119
CVE: CVE-2025-2826
Published: 2025-05-27
Description: n affected platforms running Arista EOS, ACL policies may not be enforced. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one or more ethernet or LAG interfaces may result in ACL policies not being enforced for ingress packets. This can cause incoming packets to incorrectly be allowed or denied. The two symptoms of this issue on the affected release and platform are:

  *  Packets which should be permitted may be dropped and,
  *  Packets which should be dropped may be permitted.
CVSS Score: 2.6 (LOW)
CWE: CWE-1284
References: https://www.arista.com/en/support/advisories-notices/security-advisory/21414-security-advisory-0120
CVE: CVE-2025-25025
Published: 2025-05-28
Description: IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: https://www.ibm.com/support/pages/node/7234827
CVE: CVE-2025-25026
Published: 2025-05-28
Description: IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect authentication check.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://www.ibm.com/support/pages/node/7234827