VULNERABILITY INTELLIGENCE

CVE-2025-9364

CVSS score8.7 HIGH
EPSS probability0.29%
CISA KEVNot currently listed
Published2025-09-09
Last modified2026-10-01
CVSS vectorCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis instance. This could result in an attacker on the intranet accessing sensitive data and potential alteration of data.

Weakness classification

  • CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Primary references