CVE-2025-13175CWE-549

Insecure Password Storage in Y Soft SafeQ 6

Medium · published January 14, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
22.8
In the wild
Unconfirmed
What it is

Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an administrator with UI access to reveal the value using browser developer/inspection tools. The affected customers are only those with a password-protected scan workflow connector.

This issue affects Y Soft SafeQ 6 in versions before MU106.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00304 · 22.8th percentile
Weakness
CWE-549 · Missing Password Field Masking
Published
2026-01-14T12:19Z
EPSS history
Timeline
  • 14 JAN 12:19Z
    Insecure Password Storage in Y Soft SafeQ 6
    cvelistv5