VulnerabilityDeferred

CVE-2025-27244

If exploited, sensitive information may be obtained by a remote unauthenticated attacker.

MEDIUM 5.9EPSS 0.46%

Does this matter?

Lower severity and a low EPSS score (0.46%). Track it; it rarely justifies an emergency change on its own.

Description

AssetView and AssetView CLOUD contain an issue with acquiring sensitive information from sent data to the developer. If exploited, sensitive information may be obtained by a remote unauthenticated attacker.

CVSS 3.0: 5.9 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.46% probability · 39th percentile
CISA KEV: Not listed
Weakness: CWE-201
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN26321838/
https://www.hammock.jp/assetview/info/250325.html

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.