CVE-2025-0586CWE-502

aEnrich Technology a+HRD - Insecure Deserialization

High · published January 20, 2025

CVSS v3.1
7.2
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

The a+HRD from aEnrich Technology has an Insecure Deserialization vulnerability, allowing remote attackers with database modification privileges and regular system privileges to perform arbitrary code execution.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00725 · 53.6th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2025-01-20T02:28Z
EPSS history
Timeline
  • 20 JAN 02:28Z
    aEnrich Technology a+HRD - Insecure Deserialization
    cvelistv5