CVE-2025-9031CWE-203CWE-208

CVE-2025-9031

Medium · published September 24, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

Observable Timing Discrepancy vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive Web allows Cross-Domain Search Timing.

This issue affects DivvyDrive Web: from 4.8.2.2 before 4.8.2.15.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.3th percentile
Weaknesses
CWE-203 · Observable Discrepancy; CWE-208 · Observable Timing Discrepancy
Published
2025-09-24T13:15Z
References (2)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0293 · [email protected]https://www.usom.gov.tr/bildirim/tr-25-0293 · [email protected]
EPSS history
Timeline
  • 24 SEP 08:25Z
    Timing-Based Username Enumeration in DivvyDrive Information Technologies' DivvyDrive Web
    cvelistv5