CVE-2025-15065CWE-200CWE-311CWE-552information-disclosure

CVE-2025-15065

Medium · published December 29, 2025

CVSS v3.1
6.3
EPSS
0%
Percentile
0.0
In the wild
Unconfirmed
What it is

Exposure of Sensitive Information to an Unauthorized Actor, Missing Encryption of Sensitive Data, Files or Directories Accessible to External Parties vulnerability in Kings Information & Network Co. KESS Enterprise on Windows allows Privilege Escalation, Modify Existing Service, Modify Shared File.This issue affects KESS Enterprise: before *.25.9.19.exe

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00051 · 0.0th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-311 · Missing Encryption of Sensitive Data; CWE-552 · Files or Directories Accessible to External Parties
Published
2025-12-29T06:15Z
References (1)
https://www.kings.co.kr/solution/01/KESS.jsp?O=10.64&B=Chrome · 09832df1-09c1-45b4-8a85-16c601d30feb
EPSS history
Timeline
  • 29 DEC 00:09Z
    Data Exposure in Kings Information & Network KESS Enterprise
    cvelistv5