CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. See the original NVD description below for full technical details.
CVE
CVE-2025-40646
Severity
MEDIUM
CVSS
5.4
EPSS
0.16%
Original NVD Description
Exposure of sensitive information in Viday. This vulnerability could allow an attacker to obtain sensitive information about customers by intercepting HTTP requests and searching for the JWT containing sensitive user information in the JWT payload.
Related CVEs
Other vulnerabilities affecting the same vendor(s)