CVE-2024-25011CWE-200

Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability

Medium · published September 18, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
18.8
In the wild
Unconfirmed
What it is

Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00274 · 18.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-09-18T11:38Z
EPSS history
Timeline
  • 18 SEP 11:38Z
    Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability
    cvelistv5