PT-2025-49989 · Adata Software Gmbh · Mitarbeiterportal

CVE-2025-61075 · Published 2025-12-09 · Updated 2025-12-22

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions adata Software GmbH Mitarbeiterportal version 2.15.2.0

Description The software contains multiple incorrect access control issues. A remote, authenticated user with low privileges can perform administrative functions and modify data belonging to other users through unauthorized API calls. The affected software is adata Software GmbH Mitarbeiterportal.

Recommendations Apply updates to address the access control issues in version 2.15.2.0.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-61075

Affected Products

Mitarbeiterportal

References · 6

• 🔥 https://no-sec.net/posts/cve-2025-61075 · Exploit
• https://osv.dev/vulnerability/CVE-2025-61075 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61075 · Security Note
• https://t.me/cveNotify/145617 · Telegram Post
• https://twitter.com/CVEnew/status/2003233979277934950 · Twitter Post
• https://adata.de/mitarbeiter-portal · Note