CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.3. It affects Java.
CVE
CVE-2025-25585
Severity
HIGH
CVSS
7.3
EPSS
0.26%
Java
Original NVD Description
Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords.
Related CVEs
Other vulnerabilities affecting the same vendor(s)