VULNERABILITY INTELLIGENCE
CVE-2025-48463
CVSS score3.1 LOW
EPSS probability0.13%
CISA KEVNot currently listed
Published2025-06-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data tampering.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-312
Primary references
- 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 — Third Party Advisory