CVE-2025-25060CWE-306

Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD

High · published April 2, 2025

CVSS v3.0
8.2
EPSS
1%
Percentile
42.9
In the wild
Unconfirmed
What it is

Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker.

The record
Technical detail
CVSS v3.0
8.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00512 · 42.9th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-04-02T03:20Z
EPSS history
Timeline
  • 02 APR 03:20Z
    Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD
    cvelistv5