VULNERABILITY INTELLIGENCE

CVE-2025-65185

CVSS score2.8 LOW
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-12-17
Last modified2026-10-13
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Description

There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious users to enumerate users by entering an OTP code and new password then reviewing application responses.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-203

Primary references