VULNERABILITY INTELLIGENCE
CVE-2025-2407
EPSS probability0.51%
CISA KEVNot currently listed
Published2025-05-27
Last modified2026-06-17
Description
Missing Authentication & Authorization in Web-API in Mobatime AMX MTAPI v6 on IIS allows adversaries to unrestricted access via the network. The vulnerability is fixed in Version 1.5.
Weakness classification
- vulnerability@ncsc.ch: CWE-306