CVE-2024-41985CWE-613

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506)…

Low · published August 12, 2025

CVSS v4.0
2.1
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not expire the session without logout. This could allow an attacker to get unauthorized access if the session is left idle.

The record
Technical detail
CVSS v4.0
2.1 · LOW
Vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00171 · 6.1th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2025-08-12T11:16Z
EPSS history
Timeline
  • 12 AUG 11:16Z
    A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506)…
    cvelistv5