CVE-2025-41685 in ennexos.sunnyportal.com

Riassunto

di MITRE • 19/08/2025

A low-privileged remote attacker can obtain the username of another registered Sunny Portal user by entering that user's email address.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: CERTVDE
• Prenotare: 16/04/2025
• Divulgazione: 19/08/2025
• Moderazione: accettato
• Voce: VDB-320531
• CPE: pronto
• CWE: CWE-359 (confermato)
• CVSS: 6.5 (CNA)
• EPSS: 0.00359
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-41685
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-41685
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-41685/