CVE-2025-27452CWE-548

CVE-2025-27452

Medium · published July 3, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
38.2
In the wild
Unconfirmed
What it is

The configuration of the Apache httpd webserver which serves the MEAC300-FNADE4 web application, is partly insecure. There are modules activated that are not required for the operation of the FNADE4 web application. The functionality of the some modules

pose a risk to the webserver which enable dircetory listing.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00451 · 38.2th percentile
Weakness
CWE-548 · Exposure of Information Through Directory Listing
Published
2025-07-03T11:29Z
EPSS history
Timeline
  • 03 JUL 11:29Z
    CVE-2025-27452
    cvelistv5