PT-2025-44272 · Unknown · Epsilonnet

Oscar Atienza · Published 2025-10-29 · Updated 2025-10-29 · CVE-2025-12461

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Affected versions not specified

Description This issue allows an attacker to access application areas without proper access controls. An attacker can access the path '/epsilonnet/License/About.aspx' to obtain information about the license and configuration, including installed modules.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2025-12461

Affected Products

Epsilonnet

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-12461 · Security Note
• https://incibe.es/en/incibe-cert/notices/aviso/unprotected-access-parts-application-epsilon-rh-grupo-castilla · Note
• https://twitter.com/CVEnew/status/1983492735983366336 · Twitter Post