CVE-2025-12461CWE-522

CVE-2025-12461

published October 29, 2025

CVSS
6.9
EPSS
0%
Percentile
22.1
In the wild
Unconfirmed
What it is

This vulnerability allows an attacker to access parts of the application that are not protected by any type of access control. The attacker could access this path ‘…/epsilonnet/License/About.aspx’ and obtain information on both the licence and the configuration of the product by knowing which modules are installed.

The record
Technical detail
CVSS
6.9 · NONE
CVSS v4.0
Not supplied
EPSS
0.00305 · 22.1th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2025-10-29T15:15Z
References (1)
https://www.incibe.es/en/incibe-cert/notices/aviso/unprotected-access-parts-application-epsilon-rh-grupo-castilla · [email protected]
EPSS history
Timeline
  • 29 OCT 10:51Z
    Unprotected access to parts of the application in Epsilon RH by Grupo Castilla
    cvelistv5