CVE-2025-3943CWE-598

Use of GET Request Method With sensitive Query Strings

Medium · published May 22, 2025

CVSS v3.1

4.1

EPSS

10%

Percentile

95.7

In the wild

Unconfirmed

What it is

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.

The record

Technical detail

CVSS v3.1: 4.1 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.10162 · 95.7th percentile
Weakness: CWE-598 · Use of HTTP Request With Sensitive Query String
Published: 2025-05-22T12:42Z

EPSS history

Timeline

22 MAY 12:42Z
Use of GET Request Method With sensitive Query Strings
cvelistv5