CVE-2025-8853 in Official Document Management System

الملخص

بحسب MITRE • 11/08/2025

Official Document Management System developed by 2100 Technology has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to obtain any user's connection token and use it to log into the system as that user.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: Twcert
• حجز: 11/08/2025
• إفشاء: 11/08/2025
• الاعتدال: تمت الموافقة
• إدخال: VDB-319400
• CPE: جاهز
• CWE: CWE-290 (مؤكد)
• CVSS: 9.8 (CNA)
• EPSS: 0.00685
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Telecommunication, Energy, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-8853
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-8853
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-8853/