VULNERABILITY INTELLIGENCE

CVE-2025-61075

CVSS score8.1 HIGH
EPSS probability0.54%
CISA KEVNot currently listed
Published2025-12-09
Last modified2026-10-15
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

Multiple Incorrect Access Control vulnerabilities in adata Software GmbH Mitarbeiterportal 2.15.2.0 allow remote authenticated, low-privileged users to carry out administrative functions and manipulate data of other users via unauthorized API calls.

Weakness classification

  • CWE-639: Authorization Bypass Through User-Controlled Key

Primary references