CVE-2025-7875CWE-287

Metasoft 美特软件 MetaCRM debug.jsp improper authentication

Medium · published July 20, 2025

CVSS v4.0
6.9
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

A vulnerability classified as critical has been found in Metasoft 美特软件 MetaCRM up to 6.4.2. This affects an unknown part of the file /debug.jsp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00763 · 54.9th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-07-20T07:14Z
EPSS history
Timeline
  • 20 JUL 07:14Z
    Metasoft 美特软件 MetaCRM debug.jsp improper authentication
    cvelistv5