CVE-2025-11862CWE-863broken-access-control
CVE-2025-11862
published November 11, 2025
What it is
A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API.
The record
Technical detail
- CVSS
- 8.4 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00341 · 26.3th percentile
- Weakness
- CWE-863 · Incorrect Authorization
- Published
- 2025-11-11T19:15Z
References (1)
EPSS history
Timeline