CVE-2025-11959CWE-359CWE-552

CVE-2025-11959

High · published November 11, 2025

CVSS v3.1
8.1
EPSS
0%
Percentile
21.5
In the wild
Unconfirmed
What it is

Files or Directories Accessible to External Parties, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Premierturk Information Technologies Inc. Excavation Management Information System allows Footprinting, Functionality Misuse.

This issue affects Excavation Management Information System: before v.10.2025.01.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.5th percentile
Weaknesses
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor; CWE-552 · Files or Directories Accessible to External Parties
Published
2025-11-11T20:15Z
References (2)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0388 · [email protected]https://www.usom.gov.tr/bildirim/tr-25-0388 · [email protected]
EPSS history
Timeline
  • 11 NOV 14:11Z
    Improper Access Control in Premierturk's Excavation Management Information System
    cvelistv5