CVE-2025-31932CWE-502
Deserialization of untrusted data issue exists in BizRobo!
High · published April 11, 2025
What it is
Deserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is exploited, an arbitrary code is executed on the Management Console.
The vendor provides the workaround information and recommends to apply it to the deployment environment.
The record
Technical detail
- CVSS v3.0
- 8.8 · HIGH
- Vector
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00710 · 53.0th percentile
- Weakness
- CWE-502 · Deserialization of Untrusted Data
- Published
- 2025-04-11T09:38Z
EPSS history
Timeline