CVE-2025-25711

An issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via the ProfileID value to the [/tnexus/rest/admin/updateUser] API…

High · published March 12, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
36.5
In the wild
Unconfirmed
What it is

An issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via the ProfileID value to the [/tnexus/rest/admin/updateUser] API endpoint

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00432 · 36.5th percentile
Published
2025-03-12T00:00Z
EPSS history
Timeline
  • 12 MAR 00:00Z
    An issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via the ProfileID value to the [/tnexus/rest/admin/updateUser] API…
    cvelistv5