CVE-2025-11025CWE-201

CVE-2025-11025

Medium · published September 26, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform allows Retrieve Embedded Sensitive Data.

This issue affects Vimesoft Corporate Messaging Platform: from V1.3.0 before V2.0.0.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00289 · 20.3th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2025-09-26T17:15Z
References (2)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0300 · [email protected]https://www.usom.gov.tr/bildirim/tr-25-0300 · [email protected]
EPSS history
Timeline
  • 26 SEP 12:40Z
    Information Disclosure in Vimeosoft Information Technologies' Vimesoft Corporate Messaging Platform
    cvelistv5