Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-27430 (GCVE-0-2025-27430)
Vulnerability from cvelistv5
Published
2025-03-11 00:37
Modified
2025-03-11 02:06
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-918 - Server-Side Request Forgery (SSRF)
Summary
Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| SAP_SE | SAP CRM and SAP S/4HANA (Interaction Center) |
Version: S4CRM 100 Version: 200 Version: 204 Version: 205 Version: 206 Version: S4FND 102 Version: 103 Version: 104 Version: 105 Version: 106 Version: 107 Version: 108 Version: S4CEXT 107 Version: BBPCRM 701 Version: 702 Version: 712 Version: 713 Version: 714 Version: WEBCUIF 701 Version: 731 Version: 746 Version: 747 Version: 748 Version: 800 Version: 801 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-27430",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-11T02:06:37.325274Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-03-11T02:06:54.297Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "SAP CRM and SAP S/4HANA (Interaction Center)",
"vendor": "SAP_SE",
"versions": [
{
"status": "affected",
"version": "S4CRM 100"
},
{
"status": "affected",
"version": "200"
},
{
"status": "affected",
"version": "204"
},
{
"status": "affected",
"version": "205"
},
{
"status": "affected",
"version": "206"
},
{
"status": "affected",
"version": "S4FND 102"
},
{
"status": "affected",
"version": "103"
},
{
"status": "affected",
"version": "104"
},
{
"status": "affected",
"version": "105"
},
{
"status": "affected",
"version": "106"
},
{
"status": "affected",
"version": "107"
},
{
"status": "affected",
"version": "108"
},
{
"status": "affected",
"version": "S4CEXT 107"
},
{
"status": "affected",
"version": "BBPCRM 701"
},
{
"status": "affected",
"version": "702"
},
{
"status": "affected",
"version": "712"
},
{
"status": "affected",
"version": "713"
},
{
"status": "affected",
"version": "714"
},
{
"status": "affected",
"version": "WEBCUIF 701"
},
{
"status": "affected",
"version": "731"
},
{
"status": "affected",
"version": "746"
},
{
"status": "affected",
"version": "747"
},
{
"status": "affected",
"version": "748"
},
{
"status": "affected",
"version": "800"
},
{
"status": "affected",
"version": "801"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUnder certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application\u0027s confidentiality. There is no impact on integrity or availability\u003c/p\u003e"
}
],
"value": "Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application\u0027s confidentiality. There is no impact on integrity or availability"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918: Server-Side Request Forgery (SSRF)",
"lang": "eng",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-11T00:37:24.590Z",
"orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd",
"shortName": "sap"
},
"references": [
{
"url": "https://me.sap.com/notes/3561861"
},
{
"url": "https://url.sap/sapsecuritypatchday"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center)",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd",
"assignerShortName": "sap",
"cveId": "CVE-2025-27430",
"datePublished": "2025-03-11T00:37:24.590Z",
"dateReserved": "2025-02-25T09:29:51.244Z",
"dateUpdated": "2025-03-11T02:06:54.297Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2025-27430\",\"sourceIdentifier\":\"cna@sap.com\",\"published\":\"2025-03-11T01:15:36.157\",\"lastModified\":\"2025-03-11T01:15:36.157\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application\u0027s confidentiality. There is no impact on integrity or availability\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"cna@sap.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N\",\"baseScore\":3.5,\"baseSeverity\":\"LOW\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.8,\"impactScore\":1.4}]},\"weaknesses\":[{\"source\":\"cna@sap.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-918\"}]}],\"references\":[{\"url\":\"https://me.sap.com/notes/3561861\",\"source\":\"cna@sap.com\"},{\"url\":\"https://url.sap/sapsecuritypatchday\",\"source\":\"cna@sap.com\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-27430\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-03-11T02:06:37.325274Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-03-11T02:06:50.763Z\"}}], \"cna\": {\"title\": \"Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center)\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 3.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"LOW\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"LOW\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"SAP_SE\", \"product\": \"SAP CRM and SAP S/4HANA (Interaction Center)\", \"versions\": [{\"status\": \"affected\", \"version\": \"S4CRM 100\"}, {\"status\": \"affected\", \"version\": \"200\"}, {\"status\": \"affected\", \"version\": \"204\"}, {\"status\": \"affected\", \"version\": \"205\"}, {\"status\": \"affected\", \"version\": \"206\"}, {\"status\": \"affected\", \"version\": \"S4FND 102\"}, {\"status\": \"affected\", \"version\": \"103\"}, {\"status\": \"affected\", \"version\": \"104\"}, {\"status\": \"affected\", \"version\": \"105\"}, {\"status\": \"affected\", \"version\": \"106\"}, {\"status\": \"affected\", \"version\": \"107\"}, {\"status\": \"affected\", \"version\": \"108\"}, {\"status\": \"affected\", \"version\": \"S4CEXT 107\"}, {\"status\": \"affected\", \"version\": \"BBPCRM 701\"}, {\"status\": \"affected\", \"version\": \"702\"}, {\"status\": \"affected\", \"version\": \"712\"}, {\"status\": \"affected\", \"version\": \"713\"}, {\"status\": \"affected\", \"version\": \"714\"}, {\"status\": \"affected\", \"version\": \"WEBCUIF 701\"}, {\"status\": \"affected\", \"version\": \"731\"}, {\"status\": \"affected\", \"version\": \"746\"}, {\"status\": \"affected\", \"version\": \"747\"}, {\"status\": \"affected\", \"version\": \"748\"}, {\"status\": \"affected\", \"version\": \"800\"}, {\"status\": \"affected\", \"version\": \"801\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://me.sap.com/notes/3561861\"}, {\"url\": \"https://url.sap/sapsecuritypatchday\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application\u0027s confidentiality. There is no impact on integrity or availability\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eUnder certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application\u0027s confidentiality. There is no impact on integrity or availability\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"eng\", \"type\": \"CWE\", \"cweId\": \"CWE-918\", \"description\": \"CWE-918: Server-Side Request Forgery (SSRF)\"}]}], \"providerMetadata\": {\"orgId\": \"e4686d1a-f260-4930-ac4c-2f5c992778dd\", \"shortName\": \"sap\", \"dateUpdated\": \"2025-03-11T00:37:24.590Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-27430\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-03-11T02:06:54.297Z\", \"dateReserved\": \"2025-02-25T09:29:51.244Z\", \"assignerOrgId\": \"e4686d1a-f260-4930-ac4c-2f5c992778dd\", \"datePublished\": \"2025-03-11T00:37:24.590Z\", \"assignerShortName\": \"sap\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
CERTFR-2025-AVI-0285
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
L'éditeur indique que la vulnérabilité CVE-2025-31324 est activement exploitée.
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| SAP | S/4HANA (Private Cloud) | S/4HANA (Learning Solution) versions S4HCMGXX 100 et 101 sans le dernier correctif de sécurité | ||
| SAP | NetWeaver Application Server pour ABAP | NetWeaver Application Server ABAP (applications based on GUI for HTML) versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93 et 9.14 sans le dernier correctif de sécurité | ||
| SAP | SAP BusinessObjects Business Intelligence | BusinessObjects Business Intelligence platform (Central Management Console) versions ENTERPRISE 430 et 2025 sans le dernier correctif de sécurité | ||
| SAP | NetWeaver Application Server pour ABAP | NetWeaver Application Server ABAP (Virus Scan Interface) versions SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757 et SAP_BASIS 758 sans le dernier correctif de sécurité | ||
| SAP | NetWeaver et ABAP | NetWeaver et ABAP Platform (Service Data Collection) versions ST-PI 2008_1_700, 2008_1_710 et 740 sans le dernier correctif de sécurité | ||
| SAP | NetWeaver Application Server pour ABAP | NetWeaver versions SAP_ABA 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75F, 75G, 75H et 75I sans le dernier correctif de sécurité | ||
| SAP | S4CORE entity | S4CORE entity versions S4CORE 107 et 108 sans le dernier correctif de sécurité | ||
| SAP | Commerce Cloud | Commerce Cloud versions HY_COM 2205 et COM_CLOUD 2211 sans le dernier correctif de sécurité | ||
| SAP | ERP BW Business Content | ERP BW Business Content versions BI_CONT 707, 737, 747 et 757 sans le dernier correctif de sécurité | ||
| SAP | Commerce Cloud | Commerce Cloud (Public Cloud) version COM_CLOUD 2211 sans le dernier correctif de sécurité | ||
| SAP | N/A | Field Logistics versions S4CORE 107 et 108 sans le dernier correctif | ||
| SAP | NetWeaver Application Server pour ABAP | NetWeaver Application Server ABAP versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89 et 7.93 sans le dernier correctif de sécurité | ||
| SAP | NetWeaver et ABAP | NetWeaver (Visual Composer development server) versions VCFRAMEWORK 7.50 sans le dernier correctif de sécurité | ||
| SAP | NetWeaver et ABAP | NetWeaver et ABAP Platform (Application Server ABAP) versions KRNL64UC 7.53, KERNEL 7.53 et 7.54 sans le dernier correctif de sécurité | ||
| SAP | Solution Manager | Solution Manager versions ST 720, SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758 et SAP_BASIS 914 sans le dernier correctif de sécurité | ||
| SAP | Capital Yield Tax Management | Capital Yield Tax Management versions CYTERP 420_700, CYT 800, IBS 7.0 et CYT4HANA 100 sans le dernier correctif de sécurité | ||
| SAP | SAP BusinessObjects Business Intelligence | BusinessObjects Business Intelligence Platform version ENTERPRISE 430 sans le dernier correctif de sécurité | ||
| SAP | S/4HANA (Private Cloud) | S/4HANA (Private Cloud) versions S4CORE 102, 103, 104, 105, 106, 107 et 108 sans le dernier correctif de sécurité | ||
| SAP | CRM | CRM et S/4HANA (Interaction Center) versions S4CRM 100, 200, 204, 205, 206, S4FND 102, 103, 104, 105, 106, 107, 108, S4CEXT 107, 108, BBPCRM 701, 702, 712, 713, 714, WEBCUIF 701, 731, 746, 747, 748, 800 et 801 sans le dernier correctif de sécurité | ||
| SAP | KMC WPC | KMC WPC version KMC-WPC 7.50 sans le dernier correctif de sécurité | ||
| SAP | Landscape Transformation | Landscape Transformation (Analysis Platform) versions DMIS 2011_1_700, 2011_1_710, 2011_1_730 et 2011_1_731 sans le dernier correctif de sécurité |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "S/4HANA (Learning Solution) versions S4HCMGXX 100 et 101 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "S/4HANA (Private Cloud)",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "NetWeaver Application Server ABAP (applications based on GUI for HTML) versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93 et 9.14 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "NetWeaver Application Server pour ABAP",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "BusinessObjects Business Intelligence platform (Central Management Console) versions ENTERPRISE 430 et 2025 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "SAP BusinessObjects Business Intelligence",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "NetWeaver Application Server ABAP (Virus Scan Interface) versions SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757 et SAP_BASIS 758 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "NetWeaver Application Server pour ABAP",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "NetWeaver et ABAP Platform (Service Data Collection) versions ST-PI 2008_1_700, 2008_1_710 et 740 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "NetWeaver et ABAP",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "NetWeaver versions SAP_ABA 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75F, 75G, 75H et 75I sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "NetWeaver Application Server pour ABAP",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "S4CORE entity versions S4CORE 107 et 108 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "S4CORE entity",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Commerce Cloud versions HY_COM 2205 et COM_CLOUD 2211 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "Commerce Cloud",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "ERP BW Business Content versions BI_CONT 707, 737, 747 et 757 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "ERP BW Business Content",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Commerce Cloud (Public Cloud) version COM_CLOUD 2211 sans le dernier correctif de s\u00e9curit\u00e9\n",
"product": {
"name": "Commerce Cloud",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Field Logistics versions S4CORE 107 et 108 sans le dernier correctif",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "NetWeaver Application Server ABAP versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89 et 7.93 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "NetWeaver Application Server pour ABAP",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "NetWeaver (Visual Composer development server) versions VCFRAMEWORK 7.50 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "NetWeaver et ABAP",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "NetWeaver et ABAP Platform (Application Server ABAP) versions KRNL64UC 7.53, KERNEL 7.53 et 7.54 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "NetWeaver et ABAP",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Solution Manager versions ST 720, SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758 et SAP_BASIS 914 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "Solution Manager",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Capital Yield Tax Management versions CYTERP 420_700, CYT 800, IBS 7.0 et CYT4HANA 100 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "Capital Yield Tax Management",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "BusinessObjects Business Intelligence Platform version ENTERPRISE 430 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "SAP BusinessObjects Business Intelligence",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "S/4HANA (Private Cloud) versions S4CORE 102, 103, 104, 105, 106, 107 et 108 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "S/4HANA (Private Cloud)",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "CRM et S/4HANA (Interaction Center) versions S4CRM 100, 200, 204, 205, 206, S4FND 102, 103, 104, 105, 106, 107, 108, S4CEXT 107, 108, BBPCRM 701, 702, 712, 713, 714, WEBCUIF 701, 731, 746, 747, 748, 800 et 801 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "CRM",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "KMC WPC version KMC-WPC 7.50 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "KMC WPC",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Landscape Transformation (Analysis Platform) versions DMIS 2011_1_700, 2011_1_710, 2011_1_730 et 2011_1_731 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "Landscape Transformation",
"vendor": {
"name": "SAP",
"scada": false
}
}
}
],
"affected_systems_content": "L\u0027\u00e9diteur indique que la vuln\u00e9rabilit\u00e9 CVE-2025-31324 est activement exploit\u00e9e.",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-30015",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30015"
},
{
"name": "CVE-2025-31333",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31333"
},
{
"name": "CVE-2025-27429",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27429"
},
{
"name": "CVE-2025-27428",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27428"
},
{
"name": "CVE-2025-0064",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0064"
},
{
"name": "CVE-2025-23186",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23186"
},
{
"name": "CVE-2025-27435",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27435"
},
{
"name": "CVE-2025-26654",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26654"
},
{
"name": "CVE-2025-26653",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26653"
},
{
"name": "CVE-2025-31324",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31324"
},
{
"name": "CVE-2025-30014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30014"
},
{
"name": "CVE-2024-56337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56337"
},
{
"name": "CVE-2025-27437",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27437"
},
{
"name": "CVE-2025-30016",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30016"
},
{
"name": "CVE-2025-31332",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31332"
},
{
"name": "CVE-2025-26657",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26657"
},
{
"name": "CVE-2025-31328",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31328"
},
{
"name": "CVE-2025-30013",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30013"
},
{
"name": "CVE-2025-30017",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30017"
},
{
"name": "CVE-2025-27430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27430"
},
{
"name": "CVE-2025-31331",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31331"
},
{
"name": "CVE-2025-31330",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31330"
},
{
"name": "CVE-2025-31327",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31327"
}
],
"initial_release_date": "2025-04-08T00:00:00",
"last_revision_date": "2025-04-25T00:00:00",
"links": [
{
"title": "FAQ sur l\u0027exploitation de la vuln\u00e9rabilit\u00e9 CVE-2025-31324",
"url": "https://me.sap.com/notes/3596125"
}
],
"reference": "CERTFR-2025-AVI-0285",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-04-08T00:00:00.000000"
},
{
"description": "Ajout des vuln\u00e9rabilit\u00e9s CVE-2025-31324, CVE-2025-31328 et CVE-2025-31327",
"revision_date": "2025-04-25T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits SAP. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits SAP",
"vendor_advisories": [
{
"published_at": "2025-04-08",
"title": "Bulletin de s\u00e9curit\u00e9 SAP april-2025",
"url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/april-2025.html"
}
]
}
CERTFR-2025-AVI-0190
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une injection de code indirecte à distance (XSS) et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| SAP | N/A | Electronic Invoicing for Brazil (eDocument Cockpit) versions SAP_APPL 617, 618, S4CORE 102, 103, 104, 105, 106, 107 et 108 sans le dernier correctif de sécurité | ||
| SAP | N/A | Just In Time versions S4CORE 102, 103, 104, 105, 106, 107, 108 et ECC-DIMP 618 sans le dernier correctif de sécurité | ||
| SAP | N/A | NetWeaver Application Server ABAP versions SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758 et SAP_BASIS 914 sans le dernier correctif de sécurité | ||
| SAP | N/A | Business Objects Business Intelligence Platform versions ENTERPRISE 430, 2025,2027, ENTERPRISECLIENTTOOLS 430 et 2025 sans le dernier correctif de sécurité | ||
| SAP | N/A | Permit to Work versions UIS4HOP1 800 et 900 sans le dernier correctif de sécurité | ||
| SAP | N/A | Commerce Cloud et Datahub, versions Y_COM 2205, HY_DHUB 2205, COM_CLOUD 2211 et DHUB_CLOUD 2211 sans le dernier correctif de sécurité | ||
| SAP | N/A | NetWeaver Application Server ABAP (applications based on GUI for HTML) versions KRNL64UC 7.53, KERNEL 7.54, KERNEL 7.77, KERNEL 7.89, KERNEL 7.93 et KERNEL 9.14 sans le dernier correctif de sécurité | ||
| SAP | N/A | Commerce Cloud versions Y-COM 2205 et COM-CLOUD 2211 sans le dernier correctif de sécurité | ||
| SAP | N/A | NetWeaver (ABAP Class Builder) versions SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758 et SAP_BASIS 914 sans le dernier correctif de sécurité | ||
| SAP | N/A | Web Dispatcher et Internet Communication Manager versions KRNL64UC 7.53, WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.89, WEBDISP 7.93, KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, KERNEL 7.89, KERNEL 7.93 et KERNEL 9.14 sans le dernier correctif de sécurité | ||
| SAP | N/A | PDCE versions S4CORE 102, 103, S4COREOP 104, 105, 106, 107 et 108 sans le dernier correctif de sécurité | ||
| SAP | N/A | NetWeaver Enterprise Portal (OBN component) version EP-RUNTIME 7.50 sans le dernier correctif de sécurité | ||
| SAP | N/A | Business One (Service Layer) versions B1_ON_HANA 10.0 et SAP-M-BO 10.0 sans le dernier correctif de sécurité | ||
| SAP | N/A | Fiori apps (Posting Library) versions S4CORE 103, 104, 105, 106, 107 et 108 sans le dernier correctif de sécurité | ||
| SAP | N/A | NetWeaver Application Server Java version AJAX-RUNTIME 7.50 sans le dernier correctif de sécurité | ||
| SAP | N/A | CRM et S/4HANA (Interaction Center) versions S4CRM 100, 200, 204, 205, 206, S4FND 102, 103, 104, 105, 106, 107, 108, S4CEXT 107, 108, BBPCRM 701, 702, 712, 713, 714, WEBCUIF 701, 731, 746, 747, 748, 800 et 801 sans le dernier correctif de sécurité | ||
| SAP | N/A | Business Objects Business Intelligence Platform (Web Intelligence) versions ENTERPRISE 430 et 2025 sans le dernier correctif de sécurité | ||
| SAP | N/A | Business Warehouse (Process Chains) versions DW4CORE 100, DW4CORE 200, DW4CORE 300, DW4CORE 400, DW4CORE 914, SAP_BW 730, SAP_BW 731, SAP_BW 740 et SAP_BW 750 sans le dernier correctif de sécurité | ||
| SAP | N/A | S/4HANA (RBD) versions S4CORE 102, 103, 104, 105, 106, 107, 108, EA-FINSERV 618 et EA-FINSERV 800 sans le dernier correctif de sécurité | ||
| SAP | N/A | Bibliothèque @sap/approuter versions antérieures à 16.7.1 | ||
| SAP | N/A | Commerce (Swagger UI) version COM_CLOUD 2211 sans le dernier correctif de sécurité | ||
| SAP | N/A | S/4HANA (Manage Bank Statements) versions S4CORE 107 et S4CORE 108 sans le dernier correctif de sécurité |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Electronic Invoicing for Brazil (eDocument Cockpit) versions SAP_APPL 617, 618, S4CORE 102, 103, 104, 105, 106, 107 et 108 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Just In Time versions S4CORE 102, 103, 104, 105, 106, 107, 108 et ECC-DIMP 618 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "NetWeaver Application Server ABAP versions SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758 et SAP_BASIS 914 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Business Objects Business Intelligence Platform versions ENTERPRISE 430, 2025,2027, ENTERPRISECLIENTTOOLS 430 et 2025 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Permit to Work versions UIS4HOP1 800 et 900 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Commerce Cloud et Datahub, versions Y_COM 2205, HY_DHUB 2205, COM_CLOUD 2211 et DHUB_CLOUD 2211 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "NetWeaver Application Server ABAP (applications based on GUI for HTML) versions KRNL64UC 7.53, KERNEL 7.54, KERNEL 7.77, KERNEL 7.89, KERNEL 7.93 et KERNEL 9.14 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Commerce Cloud versions Y-COM 2205 et COM-CLOUD 2211 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "NetWeaver (ABAP Class Builder) versions SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758 et SAP_BASIS 914 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Web Dispatcher et Internet Communication Manager versions KRNL64UC 7.53, WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.89, WEBDISP 7.93, KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, KERNEL 7.89, KERNEL 7.93 et KERNEL 9.14 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "PDCE versions S4CORE 102, 103, S4COREOP 104, 105, 106, 107 et 108 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "NetWeaver Enterprise Portal (OBN component) version EP-RUNTIME 7.50 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Business One (Service Layer) versions B1_ON_HANA 10.0 et SAP-M-BO 10.0 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Fiori apps (Posting Library) versions S4CORE 103, 104, 105, 106, 107 et 108 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "NetWeaver Application Server Java version AJAX-RUNTIME 7.50 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "CRM et S/4HANA (Interaction Center) versions S4CRM 100, 200, 204, 205, 206, S4FND 102, 103, 104, 105, 106, 107, 108, S4CEXT 107, 108, BBPCRM 701, 702, 712, 713, 714, WEBCUIF 701, 731, 746, 747, 748, 800 et 801 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Business Objects Business Intelligence Platform (Web Intelligence) versions ENTERPRISE 430 et 2025 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Business Warehouse (Process Chains) versions DW4CORE 100, DW4CORE 200, DW4CORE 300, DW4CORE 400, DW4CORE 914, SAP_BW 730, SAP_BW 731, SAP_BW 740 et SAP_BW 750 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "S/4HANA (RBD) versions S4CORE 102, 103, 104, 105, 106, 107, 108, EA-FINSERV 618 et EA-FINSERV 800 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Biblioth\u00e8que @sap/approuter versions ant\u00e9rieures \u00e0 16.7.1",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "Commerce (Swagger UI) version COM_CLOUD 2211 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
},
{
"description": "S/4HANA (Manage Bank Statements) versions S4CORE 107 et S4CORE 108 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "SAP",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-26661",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26661"
},
{
"name": "CVE-2025-27433",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27433"
},
{
"name": "CVE-2024-38286",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38286"
},
{
"name": "CVE-2025-25245",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25245"
},
{
"name": "CVE-2024-38819",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38819"
},
{
"name": "CVE-2025-23194",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23194"
},
{
"name": "CVE-2025-26660",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26660"
},
{
"name": "CVE-2025-25244",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25244"
},
{
"name": "CVE-2024-38820",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38820"
},
{
"name": "CVE-2025-26658",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26658"
},
{
"name": "CVE-2025-24876",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24876"
},
{
"name": "CVE-2025-23188",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23188"
},
{
"name": "CVE-2025-27434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27434"
},
{
"name": "CVE-2025-0062",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0062"
},
{
"name": "CVE-2025-26659",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26659"
},
{
"name": "CVE-2024-41736",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41736"
},
{
"name": "CVE-2025-27432",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27432"
},
{
"name": "CVE-2025-26656",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26656"
},
{
"name": "CVE-2025-23185",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23185"
},
{
"name": "CVE-2025-25242",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25242"
},
{
"name": "CVE-2025-27430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27430"
},
{
"name": "CVE-2025-27431",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27431"
},
{
"name": "CVE-2025-26655",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26655"
},
{
"name": "CVE-2024-39592",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39592"
},
{
"name": "CVE-2025-0071",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0071"
},
{
"name": "CVE-2025-27436",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27436"
},
{
"name": "CVE-2024-52316",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52316"
}
],
"initial_release_date": "2025-03-11T00:00:00",
"last_revision_date": "2025-03-11T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0190",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-03-11T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits SAP. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une injection de code indirecte \u00e0 distance (XSS) et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits SAP",
"vendor_advisories": [
{
"published_at": "2025-03-11",
"title": "Bulletin de s\u00e9curit\u00e9 SAP march-2025",
"url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2025.html"
}
]
}
fkie_cve-2025-27430
Vulnerability from fkie_nvd
Published
2025-03-11 01:15
Modified
2025-03-11 01:15
Severity ?
Summary
Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability
References
Impacted products
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application\u0027s confidentiality. There is no impact on integrity or availability"
},
{
"lang": "es",
"value": "En determinadas circunstancias, una vulnerabilidad SSRF en SAP CRM y SAP S/4HANA (Interaction Center) permite a un atacante con pocos privilegios acceder a informaci\u00f3n restringida. Esta falla permite al atacante enviar solicitudes a recursos de red internos, comprometiendo as\u00ed la confidencialidad de la aplicaci\u00f3n. No hay impacto en la integridad ni en la disponibilidad."
}
],
"id": "CVE-2025-27430",
"lastModified": "2025-03-11T01:15:36.157",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 1.4,
"source": "cna@sap.com",
"type": "Primary"
}
]
},
"published": "2025-03-11T01:15:36.157",
"references": [
{
"source": "cna@sap.com",
"url": "https://me.sap.com/notes/3561861"
},
{
"source": "cna@sap.com",
"url": "https://url.sap/sapsecuritypatchday"
}
],
"sourceIdentifier": "cna@sap.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-918"
}
],
"source": "cna@sap.com",
"type": "Primary"
}
]
}
cnvd-2025-07595
Vulnerability from cnvd
Title
SAP CRM和SAP S/4HANA服务端请求伪造漏洞（CNVD-2025-07595）
Description
SAP CRM和SAP S/4HANA都是德国思爱普（SAP）公司的产品。SAP CRM是一个客户关系管理系统。SAP S/4HANA是一个基于SAP HANA内存数据库系统的的企业资源管理软件。
SAP CRM和SAP S/4HANA存在服务端请求伪造漏洞，该漏洞源于服务器未实现足够的验证机制来确认请求的来源，攻击者可利用该漏洞探测服务器内网资源。
Severity
低
VLAI Severity ?
Patch Name
SAP CRM和SAP S/4HANA服务端请求伪造漏洞（CNVD-2025-07595）的补丁
Patch Description
SAP CRM和SAP S/4HANA都是德国思爱普（SAP）公司的产品。SAP CRM是一个客户关系管理系统。SAP S/4HANA是一个基于SAP HANA内存数据库系统的的企业资源管理软件。
SAP CRM和SAP S/4HANA存在服务端请求伪造漏洞，该漏洞源于服务器未实现足够的验证机制来确认请求的来源，攻击者可利用该漏洞探测服务器内网资源。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
目前厂商已发布升级程序修复该安全问题，详情见厂商官网: https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2025.html
Reference
https://nvd.nist.gov/vuln/detail/CVE-2025-27430
Impacted products
| Name | ['SAP SAP S/4HANA', 'SAP SAP CRM'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2025-27430",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2025-27430"
}
},
"description": "SAP CRM\u548cSAP S/4HANA\u90fd\u662f\u5fb7\u56fd\u601d\u7231\u666e\uff08SAP\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002SAP CRM\u662f\u4e00\u4e2a\u5ba2\u6237\u5173\u7cfb\u7ba1\u7406\u7cfb\u7edf\u3002SAP S/4HANA\u662f\u4e00\u4e2a\u57fa\u4e8eSAP HANA\u5185\u5b58\u6570\u636e\u5e93\u7cfb\u7edf\u7684\u7684\u4f01\u4e1a\u8d44\u6e90\u7ba1\u7406\u8f6f\u4ef6\u3002\n\nSAP CRM\u548cSAP S/4HANA\u5b58\u5728\u670d\u52a1\u7aef\u8bf7\u6c42\u4f2a\u9020\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u670d\u52a1\u5668\u672a\u5b9e\u73b0\u8db3\u591f\u7684\u9a8c\u8bc1\u673a\u5236\u6765\u786e\u8ba4\u8bf7\u6c42\u7684\u6765\u6e90\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u63a2\u6d4b\u670d\u52a1\u5668\u5185\u7f51\u8d44\u6e90\u3002",
"formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u7a0b\u5e8f\u4fee\u590d\u8be5\u5b89\u5168\u95ee\u9898\uff0c\u8be6\u60c5\u89c1\u5382\u5546\u5b98\u7f51:\r\nhttps://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2025.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2025-07595",
"openTime": "2025-04-15",
"patchDescription": "SAP CRM\u548cSAP S/4HANA\u90fd\u662f\u5fb7\u56fd\u601d\u7231\u666e\uff08SAP\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002SAP CRM\u662f\u4e00\u4e2a\u5ba2\u6237\u5173\u7cfb\u7ba1\u7406\u7cfb\u7edf\u3002SAP S/4HANA\u662f\u4e00\u4e2a\u57fa\u4e8eSAP HANA\u5185\u5b58\u6570\u636e\u5e93\u7cfb\u7edf\u7684\u7684\u4f01\u4e1a\u8d44\u6e90\u7ba1\u7406\u8f6f\u4ef6\u3002\r\n\r\nSAP CRM\u548cSAP S/4HANA\u5b58\u5728\u670d\u52a1\u7aef\u8bf7\u6c42\u4f2a\u9020\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u670d\u52a1\u5668\u672a\u5b9e\u73b0\u8db3\u591f\u7684\u9a8c\u8bc1\u673a\u5236\u6765\u786e\u8ba4\u8bf7\u6c42\u7684\u6765\u6e90\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u63a2\u6d4b\u670d\u52a1\u5668\u5185\u7f51\u8d44\u6e90\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "SAP CRM\u548cSAP S/4HANA\u670d\u52a1\u7aef\u8bf7\u6c42\u4f2a\u9020\u6f0f\u6d1e\uff08CNVD-2025-07595\uff09\u7684\u8865\u4e01",
"products": {
"product": [
"SAP SAP S/4HANA",
"SAP SAP CRM"
]
},
"referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2025-27430",
"serverity": "\u4f4e",
"submitTime": "2025-03-27",
"title": "SAP CRM\u548cSAP S/4HANA\u670d\u52a1\u7aef\u8bf7\u6c42\u4f2a\u9020\u6f0f\u6d1e\uff08CNVD-2025-07595\uff09"
}
ncsc-2025-0076
Vulnerability from csaf_ncscnl
Published
2025-03-11 12:20
Modified
2025-03-11 12:20
Summary
Kwetsbaarheden verholpen in SAP software
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten
SAP heeft meerdere kwetsbaarheden verholpen in zijn softwarecomponenten, waaronder SAP Commerce, SAP NetWeaver, en SAP BusinessObjects.
Interpretaties
De kwetsbaarheden omvatten onder andere Cross-Site Scripting (XSS) en ontbrekende autorisatiecontroles, die aanvallers in staat stellen om ongeautoriseerde toegang te verkrijgen, gegevens te manipuleren en gevoelige informatie te onthullen. Deze kwetsbaarheden kunnen leiden tot ernstige gevolgen voor de integriteit en vertrouwelijkheid van de gegevens binnen de getroffen systemen. Specifieke kwetsbaarheden zijn onder andere het ontbreken van essentiële autorisatiecontroles in SAP NetWeaver en de mogelijkheid voor aanvallers om sessies te stelen via de SAP Approuter Node.js package.
Oplossingen
SAP heeft updates uitgebracht om de kwetsbaarheden te verhelpen, waaronder 21 beveiligingspatches voor de SAP Approuter en andere kritieke kwetsbaarheden. Zie bijgevoegde referenties voor meer informatie.
Kans
medium
Schade
high
CWE-302
Authentication Bypass by Assumed-Immutable Data
CWE-1287
Improper Validation of Specified Type of Input
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
CWE-532
Insertion of Sensitive Information into Log File
CWE-639
Authorization Bypass Through User-Controlled Key
CWE-306
Missing Authentication for Critical Function
CWE-862
Missing Authorization
CWE-400
Uncontrolled Resource Consumption
CWE-770
Allocation of Resources Without Limits or Throttling
CWE-918
Server-Side Request Forgery (SSRF)
CWE-384
Session Fixation
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
CWE-209
Generation of Error Message Containing Sensitive Information
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "SAP heeft meerdere kwetsbaarheden verholpen in zijn softwarecomponenten, waaronder SAP Commerce, SAP NetWeaver, en SAP BusinessObjects.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden omvatten onder andere Cross-Site Scripting (XSS) en ontbrekende autorisatiecontroles, die aanvallers in staat stellen om ongeautoriseerde toegang te verkrijgen, gegevens te manipuleren en gevoelige informatie te onthullen. Deze kwetsbaarheden kunnen leiden tot ernstige gevolgen voor de integriteit en vertrouwelijkheid van de gegevens binnen de getroffen systemen. Specifieke kwetsbaarheden zijn onder andere het ontbreken van essenti\u00eble autorisatiecontroles in SAP NetWeaver en de mogelijkheid voor aanvallers om sessies te stelen via de SAP Approuter Node.js package.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "SAP heeft updates uitgebracht om de kwetsbaarheden te verhelpen, waaronder 21 beveiligingspatches voor de SAP Approuter en andere kritieke kwetsbaarheden. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Authentication Bypass by Assumed-Immutable Data",
"title": "CWE-302"
},
{
"category": "general",
"text": "Improper Validation of Specified Type of Input",
"title": "CWE-1287"
},
{
"category": "general",
"text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"title": "CWE-601"
},
{
"category": "general",
"text": "Insertion of Sensitive Information into Log File",
"title": "CWE-532"
},
{
"category": "general",
"text": "Authorization Bypass Through User-Controlled Key",
"title": "CWE-639"
},
{
"category": "general",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
},
{
"category": "general",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "general",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "general",
"text": "Session Fixation",
"title": "CWE-384"
},
{
"category": "general",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "general",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "general",
"text": "Generation of Error Message Containing Sensitive Information",
"title": "CWE-209"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Source - sap",
"url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2025.html"
}
],
"title": "Kwetsbaarheden verholpen in SAP software",
"tracking": {
"current_release_date": "2025-03-11T12:20:06.258896Z",
"generator": {
"date": "2025-02-25T15:15:00Z",
"engine": {
"name": "V.A.",
"version": "1.0"
}
},
"id": "NCSC-2025-0076",
"initial_release_date": "2025-03-11T12:20:06.258896Z",
"revision_history": [
{
"date": "2025-03-11T12:20:06.258896Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1298148",
"product_identification_helper": {
"cpe": "cpe:/a:sap:sap:-"
}
}
}
],
"category": "product_name",
"name": "SAP Software"
}
],
"category": "vendor",
"name": "SAP"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/com_cloud2211",
"product": {
"name": "vers:unknown/com_cloud2211",
"product_id": "CSAFPID-2455751"
}
}
],
"category": "product_name",
"name": "SAP Commerce (Swagger UI)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis700",
"product": {
"name": "vers:unknown/sap_basis700",
"product_id": "CSAFPID-2455822"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis701",
"product": {
"name": "vers:unknown/sap_basis701",
"product_id": "CSAFPID-2455823"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis702",
"product": {
"name": "vers:unknown/sap_basis702",
"product_id": "CSAFPID-2455824"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis731",
"product": {
"name": "vers:unknown/sap_basis731",
"product_id": "CSAFPID-2455825"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis740",
"product": {
"name": "vers:unknown/sap_basis740",
"product_id": "CSAFPID-2455826"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis750",
"product": {
"name": "vers:unknown/sap_basis750",
"product_id": "CSAFPID-2455827"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis751",
"product": {
"name": "vers:unknown/sap_basis751",
"product_id": "CSAFPID-2455828"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis752",
"product": {
"name": "vers:unknown/sap_basis752",
"product_id": "CSAFPID-2455829"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis753",
"product": {
"name": "vers:unknown/sap_basis753",
"product_id": "CSAFPID-2455830"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis754",
"product": {
"name": "vers:unknown/sap_basis754",
"product_id": "CSAFPID-2455831"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis755",
"product": {
"name": "vers:unknown/sap_basis755",
"product_id": "CSAFPID-2455832"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis756",
"product": {
"name": "vers:unknown/sap_basis756",
"product_id": "CSAFPID-2455833"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis757",
"product": {
"name": "vers:unknown/sap_basis757",
"product_id": "CSAFPID-2455834"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis758",
"product": {
"name": "vers:unknown/sap_basis758",
"product_id": "CSAFPID-2455835"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis914",
"product": {
"name": "vers:unknown/sap_basis914",
"product_id": "CSAFPID-2455836"
}
}
],
"category": "product_name",
"name": "SAP NetWeaver (ABAP Class Builder)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/2.6.1to16.7.1",
"product": {
"name": "vers:unknown/2.6.1to16.7.1",
"product_id": "CSAFPID-1987654"
}
}
],
"category": "product_name",
"name": "SAP Approuter Node.js package"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/b1_on_hana10.0",
"product": {
"name": "vers:unknown/b1_on_hana10.0",
"product_id": "CSAFPID-2455809"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap-m-bo10.0",
"product": {
"name": "vers:unknown/sap-m-bo10.0",
"product_id": "CSAFPID-2455810"
}
}
],
"category": "product_name",
"name": "SAP Business One (Service Layer)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/dw4core100",
"product": {
"name": "vers:unknown/dw4core100",
"product_id": "CSAFPID-2455779"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_bw730",
"product": {
"name": "vers:unknown/sap_bw730",
"product_id": "CSAFPID-2455784"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/200",
"product": {
"name": "vers:unknown/200",
"product_id": "CSAFPID-2455780"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/300",
"product": {
"name": "vers:unknown/300",
"product_id": "CSAFPID-2455781"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/400",
"product": {
"name": "vers:unknown/400",
"product_id": "CSAFPID-2455782"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/731",
"product": {
"name": "vers:unknown/731",
"product_id": "CSAFPID-2455785"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/740",
"product": {
"name": "vers:unknown/740",
"product_id": "CSAFPID-2455786"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/750",
"product": {
"name": "vers:unknown/750",
"product_id": "CSAFPID-2455787"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/751",
"product": {
"name": "vers:unknown/751",
"product_id": "CSAFPID-2455788"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/752",
"product": {
"name": "vers:unknown/752",
"product_id": "CSAFPID-2455789"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/753",
"product": {
"name": "vers:unknown/753",
"product_id": "CSAFPID-2455790"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/754",
"product": {
"name": "vers:unknown/754",
"product_id": "CSAFPID-2455791"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/755",
"product": {
"name": "vers:unknown/755",
"product_id": "CSAFPID-2455792"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/756",
"product": {
"name": "vers:unknown/756",
"product_id": "CSAFPID-2455793"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/757",
"product": {
"name": "vers:unknown/757",
"product_id": "CSAFPID-2455794"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/758",
"product": {
"name": "vers:unknown/758",
"product_id": "CSAFPID-2455795"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/914",
"product": {
"name": "vers:unknown/914",
"product_id": "CSAFPID-2455783"
}
}
],
"category": "product_name",
"name": "SAP Business Warehouse (Process Chains)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/7.54",
"product": {
"name": "vers:unknown/7.54",
"product_id": "CSAFPID-2455756"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.77",
"product": {
"name": "vers:unknown/7.77",
"product_id": "CSAFPID-2455757"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.89",
"product": {
"name": "vers:unknown/7.89",
"product_id": "CSAFPID-2455758"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.93",
"product": {
"name": "vers:unknown/7.93",
"product_id": "CSAFPID-2455759"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/9.14",
"product": {
"name": "vers:unknown/9.14",
"product_id": "CSAFPID-2455761"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/kernel7.53",
"product": {
"name": "vers:unknown/kernel7.53",
"product_id": "CSAFPID-2455760"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/krnl64uc7.53",
"product": {
"name": "vers:unknown/krnl64uc7.53",
"product_id": "CSAFPID-2455754"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/webdisp7.53",
"product": {
"name": "vers:unknown/webdisp7.53",
"product_id": "CSAFPID-2455755"
}
}
],
"category": "product_name",
"name": "SAP Web Dispatcher and Internet Communication Manager"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/2025",
"product": {
"name": "vers:unknown/2025",
"product_id": "CSAFPID-2455797"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/enterprise430",
"product": {
"name": "vers:unknown/enterprise430",
"product_id": "CSAFPID-2455796"
}
}
],
"category": "product_name",
"name": "SAP BusinessObjects Business Intelligence Platform (Web Intelligence)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/108",
"product": {
"name": "vers:unknown/108",
"product_id": "CSAFPID-2455763"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/s4core107",
"product": {
"name": "vers:unknown/s4core107",
"product_id": "CSAFPID-2455762"
}
}
],
"category": "product_name",
"name": "SAP S/4HANA (Manage Bank Statements)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/103",
"product": {
"name": "vers:unknown/103",
"product_id": "CSAFPID-2455770"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/104",
"product": {
"name": "vers:unknown/104",
"product_id": "CSAFPID-2455771"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/105",
"product": {
"name": "vers:unknown/105",
"product_id": "CSAFPID-2455772"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/106",
"product": {
"name": "vers:unknown/106",
"product_id": "CSAFPID-2455773"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/107",
"product": {
"name": "vers:unknown/107",
"product_id": "CSAFPID-2455774"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/108",
"product": {
"name": "vers:unknown/108",
"product_id": "CSAFPID-2455775"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/ea-finserv618",
"product": {
"name": "vers:unknown/ea-finserv618",
"product_id": "CSAFPID-2455776"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/ea-finserv800",
"product": {
"name": "vers:unknown/ea-finserv800",
"product_id": "CSAFPID-2455777"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/s4core102",
"product": {
"name": "vers:unknown/s4core102",
"product_id": "CSAFPID-2455769"
}
}
],
"category": "product_name",
"name": "SAP S/4HANA (RBD)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/104",
"product": {
"name": "vers:unknown/104",
"product_id": "CSAFPID-2455817"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/105",
"product": {
"name": "vers:unknown/105",
"product_id": "CSAFPID-2455818"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/106",
"product": {
"name": "vers:unknown/106",
"product_id": "CSAFPID-2455819"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/107",
"product": {
"name": "vers:unknown/107",
"product_id": "CSAFPID-2455820"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/108",
"product": {
"name": "vers:unknown/108",
"product_id": "CSAFPID-2455821"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/s4core103",
"product": {
"name": "vers:unknown/s4core103",
"product_id": "CSAFPID-2455816"
}
}
],
"category": "product_name",
"name": "SAP Fiori apps (Posting Library)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/106",
"product": {
"name": "vers:unknown/106",
"product_id": "CSAFPID-2455806"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/107",
"product": {
"name": "vers:unknown/107",
"product_id": "CSAFPID-2455807"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/108",
"product": {
"name": "vers:unknown/108",
"product_id": "CSAFPID-2455808"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/s4core105",
"product": {
"name": "vers:unknown/s4core105",
"product_id": "CSAFPID-2455805"
}
}
],
"category": "product_name",
"name": "S/4HANA (Manage Purchasing Info Records)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/2025",
"product": {
"name": "vers:unknown/2025",
"product_id": "CSAFPID-2455765"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2027",
"product": {
"name": "vers:unknown/2027",
"product_id": "CSAFPID-2455766"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/enterprise430",
"product": {
"name": "vers:unknown/enterprise430",
"product_id": "CSAFPID-2455764"
}
}
],
"category": "product_name",
"name": "SAP Business Objects Business Intelligence Platform"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/2025",
"product": {
"name": "vers:unknown/2025",
"product_id": "CSAFPID-1425566"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/enterprise430",
"product": {
"name": "vers:unknown/enterprise430",
"product_id": "CSAFPID-1425565"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/enterpriseclienttools430",
"product": {
"name": "vers:unknown/enterpriseclienttools430",
"product_id": "CSAFPID-2455753"
}
}
],
"category": "product_name",
"name": "SAP BusinessObjects Business Intelligence Platform"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/103",
"product": {
"name": "vers:unknown/103",
"product_id": "CSAFPID-2455843"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/104",
"product": {
"name": "vers:unknown/104",
"product_id": "CSAFPID-2455844"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/105",
"product": {
"name": "vers:unknown/105",
"product_id": "CSAFPID-2455845"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/106",
"product": {
"name": "vers:unknown/106",
"product_id": "CSAFPID-2455846"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/107",
"product": {
"name": "vers:unknown/107",
"product_id": "CSAFPID-2455847"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/108",
"product": {
"name": "vers:unknown/108",
"product_id": "CSAFPID-2455848"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/200",
"product": {
"name": "vers:unknown/200",
"product_id": "CSAFPID-2455838"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/204",
"product": {
"name": "vers:unknown/204",
"product_id": "CSAFPID-2455839"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/205",
"product": {
"name": "vers:unknown/205",
"product_id": "CSAFPID-2455840"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/206",
"product": {
"name": "vers:unknown/206",
"product_id": "CSAFPID-2455841"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/702",
"product": {
"name": "vers:unknown/702",
"product_id": "CSAFPID-2455851"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/712",
"product": {
"name": "vers:unknown/712",
"product_id": "CSAFPID-2455852"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/713",
"product": {
"name": "vers:unknown/713",
"product_id": "CSAFPID-2455853"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/714",
"product": {
"name": "vers:unknown/714",
"product_id": "CSAFPID-2455854"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/731",
"product": {
"name": "vers:unknown/731",
"product_id": "CSAFPID-2455856"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/746",
"product": {
"name": "vers:unknown/746",
"product_id": "CSAFPID-2455857"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/747",
"product": {
"name": "vers:unknown/747",
"product_id": "CSAFPID-2455858"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/748",
"product": {
"name": "vers:unknown/748",
"product_id": "CSAFPID-2455859"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/800",
"product": {
"name": "vers:unknown/800",
"product_id": "CSAFPID-2455860"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/801",
"product": {
"name": "vers:unknown/801",
"product_id": "CSAFPID-2455861"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/bbpcrm701",
"product": {
"name": "vers:unknown/bbpcrm701",
"product_id": "CSAFPID-2455850"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/s4cext107",
"product": {
"name": "vers:unknown/s4cext107",
"product_id": "CSAFPID-2455849"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/s4crm100",
"product": {
"name": "vers:unknown/s4crm100",
"product_id": "CSAFPID-2455837"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/s4fnd102",
"product": {
"name": "vers:unknown/s4fnd102",
"product_id": "CSAFPID-2455842"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/webcuif701",
"product": {
"name": "vers:unknown/webcuif701",
"product_id": "CSAFPID-2455855"
}
}
],
"category": "product_name",
"name": "SAP CRM and SAP S/4HANA (Interaction Center)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/103",
"product": {
"name": "vers:unknown/103",
"product_id": "CSAFPID-2455865"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/104",
"product": {
"name": "vers:unknown/104",
"product_id": "CSAFPID-2455866"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/105",
"product": {
"name": "vers:unknown/105",
"product_id": "CSAFPID-2455867"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/106",
"product": {
"name": "vers:unknown/106",
"product_id": "CSAFPID-2455868"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/107",
"product": {
"name": "vers:unknown/107",
"product_id": "CSAFPID-2455869"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/108",
"product": {
"name": "vers:unknown/108",
"product_id": "CSAFPID-2455870"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/618",
"product": {
"name": "vers:unknown/618",
"product_id": "CSAFPID-2455863"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/s4core102",
"product": {
"name": "vers:unknown/s4core102",
"product_id": "CSAFPID-2455864"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_appl617",
"product": {
"name": "vers:unknown/sap_appl617",
"product_id": "CSAFPID-2455862"
}
}
],
"category": "product_name",
"name": "SAP Electronic Invoicing for Brazil (eDocument Cockpit)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/103",
"product": {
"name": "vers:unknown/103",
"product_id": "CSAFPID-2455799"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/104",
"product": {
"name": "vers:unknown/104",
"product_id": "CSAFPID-2455800"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/105",
"product": {
"name": "vers:unknown/105",
"product_id": "CSAFPID-2455801"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/106",
"product": {
"name": "vers:unknown/106",
"product_id": "CSAFPID-2455802"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/107",
"product": {
"name": "vers:unknown/107",
"product_id": "CSAFPID-2455803"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/ecc-dimp618",
"product": {
"name": "vers:unknown/ecc-dimp618",
"product_id": "CSAFPID-2455804"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/s4core102",
"product": {
"name": "vers:unknown/s4core102",
"product_id": "CSAFPID-2455798"
}
}
],
"category": "product_name",
"name": "SAP Just In Time"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis740",
"product": {
"name": "vers:unknown/sap_basis740",
"product_id": "CSAFPID-1761541"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis750",
"product": {
"name": "vers:unknown/sap_basis750",
"product_id": "CSAFPID-1761542"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis751",
"product": {
"name": "vers:unknown/sap_basis751",
"product_id": "CSAFPID-1761543"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis752",
"product": {
"name": "vers:unknown/sap_basis752",
"product_id": "CSAFPID-1761544"
}
}
],
"category": "product_name",
"name": "SAP NetWeaver Application Server ABAP"
}
],
"category": "vendor",
"name": "SAP_SE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-27434",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-27434",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27434.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-27434"
},
{
"cve": "CVE-2025-26661",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-26661",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26661.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-26661"
},
{
"cve": "CVE-2024-38286",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38286",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38286.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2024-38286"
},
{
"cve": "CVE-2025-24876",
"cwe": {
"id": "CWE-601",
"name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
},
"notes": [
{
"category": "other",
"text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"title": "CWE-601"
},
{
"category": "other",
"text": "Improper Validation of Specified Type of Input",
"title": "CWE-1287"
},
{
"category": "other",
"text": "Authentication Bypass by Assumed-Immutable Data",
"title": "CWE-302"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24876",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24876.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-24876"
},
{
"cve": "CVE-2024-39592",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-39592",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39592.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2024-39592"
},
{
"cve": "CVE-2025-26658",
"cwe": {
"id": "CWE-384",
"name": "Session Fixation"
},
"notes": [
{
"category": "other",
"text": "Session Fixation",
"title": "CWE-384"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-26658",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26658.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-26658"
},
{
"cve": "CVE-2025-26659",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-26659",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26659.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-26659"
},
{
"cve": "CVE-2025-25242",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-25242",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-25242.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-25242"
},
{
"cve": "CVE-2025-25244",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-25244",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-25244.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-25244"
},
{
"cve": "CVE-2025-27431",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-27431",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27431.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-27431"
},
{
"cve": "CVE-2025-25245",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-25245",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-25245.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-25245"
},
{
"cve": "CVE-2025-23194",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "other",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-23194",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23194.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-23194"
},
{
"cve": "CVE-2025-0071",
"cwe": {
"id": "CWE-532",
"name": "Insertion of Sensitive Information into Log File"
},
"notes": [
{
"category": "other",
"text": "Insertion of Sensitive Information into Log File",
"title": "CWE-532"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-0071",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-0071.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-0071"
},
{
"cve": "CVE-2025-0062",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-0062",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-0062.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-0062"
},
{
"cve": "CVE-2025-27433",
"cwe": {
"id": "CWE-639",
"name": "Authorization Bypass Through User-Controlled Key"
},
"notes": [
{
"category": "other",
"text": "Authorization Bypass Through User-Controlled Key",
"title": "CWE-639"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-27433",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27433.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-27433"
},
{
"cve": "CVE-2025-23188",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-23188",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23188.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-23188"
},
{
"cve": "CVE-2025-26660",
"cwe": {
"id": "CWE-639",
"name": "Authorization Bypass Through User-Controlled Key"
},
"notes": [
{
"category": "other",
"text": "Authorization Bypass Through User-Controlled Key",
"title": "CWE-639"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-26660",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26660.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-26660"
},
{
"cve": "CVE-2025-26656",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-26656",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26656.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-26656"
},
{
"cve": "CVE-2024-41736",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-41736",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41736.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2024-41736"
},
{
"cve": "CVE-2025-23185",
"cwe": {
"id": "CWE-209",
"name": "Generation of Error Message Containing Sensitive Information"
},
"notes": [
{
"category": "other",
"text": "Generation of Error Message Containing Sensitive Information",
"title": "CWE-209"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-23185",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23185.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-23185"
},
{
"cve": "CVE-2024-38819",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38819",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38819.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2024-38819"
},
{
"cve": "CVE-2025-27430",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"notes": [
{
"category": "other",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-27430",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27430.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-27430"
},
{
"cve": "CVE-2025-26655",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-26655",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26655.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-26655"
},
{
"cve": "CVE-2025-27432",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-27432",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27432.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1298148",
"CSAFPID-2455751",
"CSAFPID-2455822",
"CSAFPID-2455823",
"CSAFPID-2455824",
"CSAFPID-2455825",
"CSAFPID-2455826",
"CSAFPID-2455827",
"CSAFPID-2455828",
"CSAFPID-2455829",
"CSAFPID-2455830",
"CSAFPID-2455831",
"CSAFPID-2455832",
"CSAFPID-2455833",
"CSAFPID-2455834",
"CSAFPID-2455835",
"CSAFPID-2455836",
"CSAFPID-1987654",
"CSAFPID-2455809",
"CSAFPID-2455810",
"CSAFPID-2455779",
"CSAFPID-2455756",
"CSAFPID-2455757",
"CSAFPID-2455758",
"CSAFPID-2455759",
"CSAFPID-2455761",
"CSAFPID-2455760",
"CSAFPID-2455754",
"CSAFPID-2455755",
"CSAFPID-2455797",
"CSAFPID-2455796",
"CSAFPID-2455763",
"CSAFPID-2455762",
"CSAFPID-2455770",
"CSAFPID-2455771",
"CSAFPID-2455772",
"CSAFPID-2455773",
"CSAFPID-2455774",
"CSAFPID-2455775",
"CSAFPID-2455776",
"CSAFPID-2455777",
"CSAFPID-2455769",
"CSAFPID-2455817",
"CSAFPID-2455818",
"CSAFPID-2455819",
"CSAFPID-2455820",
"CSAFPID-2455821",
"CSAFPID-2455816",
"CSAFPID-2455806",
"CSAFPID-2455807",
"CSAFPID-2455808",
"CSAFPID-2455805",
"CSAFPID-2455765",
"CSAFPID-2455766",
"CSAFPID-2455764",
"CSAFPID-1425566",
"CSAFPID-1425565",
"CSAFPID-2455753",
"CSAFPID-2455784",
"CSAFPID-2455780",
"CSAFPID-2455781",
"CSAFPID-2455782",
"CSAFPID-2455785",
"CSAFPID-2455786",
"CSAFPID-2455787",
"CSAFPID-2455788",
"CSAFPID-2455789",
"CSAFPID-2455790",
"CSAFPID-2455791",
"CSAFPID-2455792",
"CSAFPID-2455793",
"CSAFPID-2455794",
"CSAFPID-2455795",
"CSAFPID-2455783",
"CSAFPID-2455843",
"CSAFPID-2455844",
"CSAFPID-2455845",
"CSAFPID-2455846",
"CSAFPID-2455847",
"CSAFPID-2455848",
"CSAFPID-2455838",
"CSAFPID-2455839",
"CSAFPID-2455840",
"CSAFPID-2455841",
"CSAFPID-2455851",
"CSAFPID-2455852",
"CSAFPID-2455853",
"CSAFPID-2455854",
"CSAFPID-2455856",
"CSAFPID-2455857",
"CSAFPID-2455858",
"CSAFPID-2455859",
"CSAFPID-2455860",
"CSAFPID-2455861",
"CSAFPID-2455850",
"CSAFPID-2455849",
"CSAFPID-2455837",
"CSAFPID-2455842",
"CSAFPID-2455855",
"CSAFPID-2455865",
"CSAFPID-2455866",
"CSAFPID-2455867",
"CSAFPID-2455868",
"CSAFPID-2455869",
"CSAFPID-2455870",
"CSAFPID-2455863",
"CSAFPID-2455864",
"CSAFPID-2455862",
"CSAFPID-2455799",
"CSAFPID-2455800",
"CSAFPID-2455801",
"CSAFPID-2455802",
"CSAFPID-2455803",
"CSAFPID-2455804",
"CSAFPID-2455798",
"CSAFPID-1761541",
"CSAFPID-1761542",
"CSAFPID-1761543",
"CSAFPID-1761544"
]
}
],
"title": "CVE-2025-27432"
}
]
}
ncsc-2025-0119
Vulnerability from csaf_ncscnl
Published
2025-04-09 09:12
Modified
2025-04-30 13:12
Summary
Kwetsbaarheden verholpen in SAP-producten
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten
SAP heeft kwetsbaarheden verholpen in verschillende producten, waaronder SAP Financial Consolidation, SAP Landscape Transformation, SAP NetWeaver Application Server ABAP, SAP Commerce Cloud, SAP ERP BW, SAP BusinessObjects Business Intelligence Platform, SAP KMC WPC, SAP Solution Manager, SAP S4CORE, en SAP CRM.
Interpretaties
De uitgebrachte paches bevatten een aantal kritieke kwetsbaarheden met de kenmerken CVE-2025-30016, CVE-2025-31330 en CVE-2025-27429.
De kwetsbaarheid met kenmerk CVE-2025-30016 is een kritieke authenticatie-bypass in SAP Financial Consolidation, die ongeauthenticeerde aanvallers toegang geeft tot het Admin-account.
SAP Landscape Transformation heeft een kwetsbaarheid met kenmerk CVE-2025-31330, die het mogelijk maakt voor aanvallers met gebruikersprivileges om willekeurige ABAP-code in te voegen.
De kwetsbaarheid met kenmerk CVE-2025-27429 in SAP S/4HANA (Private Cloud) stelt een aanvaller met gebruikersprivileges in staat om willekeurige ABAP-code in de RFC-functiemodule te injecteren en autorisatiecontroles te omzeilen, waardoor de vertrouwelijkheid, integriteit en beschikbaarheid van het systeem in gevaar komen.
SAP NetWeaver Application Server ABAP heeft een Mixed Dynamic RFC Destination-kwetsbaarheid die kan leiden tot blootstelling van gevoelige inloggegevens. Daarnaast zijn er kwetsbaarheden in SAP Commerce Cloud die de vertrouwelijkheid en integriteit van gegevens in gevaar kunnen brengen. De kwetsbaarheden in SAP ERP BW en SAP BusinessObjects kunnen leiden tot ongeautoriseerde uitvoering van commando's en wijziging van bestanden. De directory traversal-kwetsbaarheden in SAP Capital Yield Tax Management en SAP Solution Manager stellen aanvallers in staat om gevoelige informatie te verkrijgen. De SSRF-kwetsbaarheid in SAP CRM en SAP S/4HANA kan de vertrouwelijkheid van interne netwerkbronnen in gevaar brengen.
**UPDATE 25/04/2025**
SAP heeft een update uitgebracht op de advisory van eerder deze maand. De belangrijkste aanpassing is de toevoeging van **CVE-2025-31324**. Dit is een kritieke kwetsbaarheid waarbij de Metadata Uploader geen correcte autorisatiecontrole toepast. Hierdoor kan een niet-geauthenticeerde aanvaller kwaadaardige uitvoerbare bestanden uploaden naar de server.
**UPDATE 28/04/2025**
Het NCSC ontvangt meldingen dat de kwetsbaarheid met kenmerk CVE-2025-31324 actief wordt misbruikt.
De getroffen Metadata Uploader is onderdeel van Visual Composer. Dit product, bedoeld om zonder het schrijven van programmacode user-interfaces te bouwen, wordt al sinds 2015 niet meer ondersteund. Het gebruik ervan om interfaces te bouwen wordt daarom afgeraden. Ook is het goed gebruik een dergelijk ontwerpsoftware niet publiek toegankelijk te hebben, maar te hosten in een separate ontwikkelomgeving.
In het geval van Visual Composer kan de toegang worden beperkt door de applicatia-alias `developmentserver` uit te schakelen en middels firewall rules de toegang tot de development-server applicatie-url te blokkeren.
**UPDATE 30/04/2025**
In de eerdere update van dit beveiligingsadvies op 28/04/2025 heeft het NCSC gemeld dat de kwetsbaarheid met het kenmerk CVE-2025-31324 actief wordt misbruikt. Een onderdeel van het misbruik is dat kwaadwillenden webshells plaatsen. Na nader onderzoek door het NCSC en op basis van ontvangen meldingen, is ook waargenomen dat deze webshells online te koop wordt aangeboden. Dit vergroot de kans op misbruik aanzienlijk. Het NCSC heeft daarom besloten om dit beveiligingsadvies naar H/H te verhogen.
Oplossingen
SAP heeft patches uitgebracht om de kwetsbaarheden in de genoemde producten te verhelpen.
Ook heeft SAP voor de kwetsbaarheid met kenmerk CVE-2025-31324 een noodpatch uitgebracht om deze te verhelpen. Het NCSC adviseert om naast de reguliere updates vooral deze noodpatch ook in te zetten.
**UPDATE 30/04/2025**
Het NCSC adviseert met klem om de beschikbaar gestelde beveiligingsupdates te installeren en uw systeem op aanwezigheid van webshells te controleren. Zie bijgevoegde referenties voor meer informatie.
Kans
high
Schade
high
CWE-94
Improper Control of Generation of Code ('Code Injection')
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-35
Path Traversal: '.../...//'
CWE-277
Insecure Inherited Permissions
CWE-921
Storage of Sensitive Data in a Mechanism without Access Control
CWE-472
External Control of Assumed-Immutable Web Parameter
CWE-319
Cleartext Transmission of Sensitive Information
CWE-862
Missing Authorization
CWE-918
Server-Side Request Forgery (SSRF)
CWE-863
Incorrect Authorization
CWE-787
Out-of-bounds Write
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-732
Incorrect Permission Assignment for Critical Resource
CWE-434
Unrestricted Upload of File with Dangerous Type
CWE-352
Cross-Site Request Forgery (CSRF)
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "SAP heeft kwetsbaarheden verholpen in verschillende producten, waaronder SAP Financial Consolidation, SAP Landscape Transformation, SAP NetWeaver Application Server ABAP, SAP Commerce Cloud, SAP ERP BW, SAP BusinessObjects Business Intelligence Platform, SAP KMC WPC, SAP Solution Manager, SAP S4CORE, en SAP CRM.",
"title": "Feiten"
},
{
"category": "description",
"text": "De uitgebrachte paches bevatten een aantal kritieke kwetsbaarheden met de kenmerken CVE-2025-30016, CVE-2025-31330 en CVE-2025-27429.\n\nDe kwetsbaarheid met kenmerk CVE-2025-30016 is een kritieke authenticatie-bypass in SAP Financial Consolidation, die ongeauthenticeerde aanvallers toegang geeft tot het Admin-account. \n\nSAP Landscape Transformation heeft een kwetsbaarheid met kenmerk CVE-2025-31330, die het mogelijk maakt voor aanvallers met gebruikersprivileges om willekeurige ABAP-code in te voegen.\n\nDe kwetsbaarheid met kenmerk CVE-2025-27429 in SAP S/4HANA (Private Cloud) stelt een aanvaller met gebruikersprivileges in staat om willekeurige ABAP-code in de RFC-functiemodule te injecteren en autorisatiecontroles te omzeilen, waardoor de vertrouwelijkheid, integriteit en beschikbaarheid van het systeem in gevaar komen.\n\n\nSAP NetWeaver Application Server ABAP heeft een Mixed Dynamic RFC Destination-kwetsbaarheid die kan leiden tot blootstelling van gevoelige inloggegevens. Daarnaast zijn er kwetsbaarheden in SAP Commerce Cloud die de vertrouwelijkheid en integriteit van gegevens in gevaar kunnen brengen. De kwetsbaarheden in SAP ERP BW en SAP BusinessObjects kunnen leiden tot ongeautoriseerde uitvoering van commando\u0027s en wijziging van bestanden. De directory traversal-kwetsbaarheden in SAP Capital Yield Tax Management en SAP Solution Manager stellen aanvallers in staat om gevoelige informatie te verkrijgen. De SSRF-kwetsbaarheid in SAP CRM en SAP S/4HANA kan de vertrouwelijkheid van interne netwerkbronnen in gevaar brengen. \n\n\n**UPDATE 25/04/2025**\nSAP heeft een update uitgebracht op de advisory van eerder deze maand. De belangrijkste aanpassing is de toevoeging van **CVE-2025-31324**. Dit is een kritieke kwetsbaarheid waarbij de Metadata Uploader geen correcte autorisatiecontrole toepast. Hierdoor kan een niet-geauthenticeerde aanvaller kwaadaardige uitvoerbare bestanden uploaden naar de server.\n\n**UPDATE 28/04/2025**\nHet NCSC ontvangt meldingen dat de kwetsbaarheid met kenmerk CVE-2025-31324 actief wordt misbruikt.\nDe getroffen Metadata Uploader is onderdeel van Visual Composer. Dit product, bedoeld om zonder het schrijven van programmacode user-interfaces te bouwen, wordt al sinds 2015 niet meer ondersteund. Het gebruik ervan om interfaces te bouwen wordt daarom afgeraden. Ook is het goed gebruik een dergelijk ontwerpsoftware niet publiek toegankelijk te hebben, maar te hosten in een separate ontwikkelomgeving.\nIn het geval van Visual Composer kan de toegang worden beperkt door de applicatia-alias `developmentserver` uit te schakelen en middels firewall rules de toegang tot de development-server applicatie-url te blokkeren.\n\n**UPDATE 30/04/2025**\nIn de eerdere update van dit beveiligingsadvies op 28/04/2025 heeft het NCSC gemeld dat de kwetsbaarheid met het kenmerk CVE-2025-31324 actief wordt misbruikt. Een onderdeel van het misbruik is dat kwaadwillenden webshells plaatsen. Na nader onderzoek door het NCSC en op basis van ontvangen meldingen, is ook waargenomen dat deze webshells online te koop wordt aangeboden. Dit vergroot de kans op misbruik aanzienlijk. Het NCSC heeft daarom besloten om dit beveiligingsadvies naar H/H te verhogen.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "SAP heeft patches uitgebracht om de kwetsbaarheden in de genoemde producten te verhelpen.\n\nOok heeft SAP voor de kwetsbaarheid met kenmerk CVE-2025-31324 een noodpatch uitgebracht om deze te verhelpen. Het NCSC adviseert om naast de reguliere updates vooral deze noodpatch ook in te zetten.\n\n**UPDATE 30/04/2025**\nHet NCSC adviseert met klem om de beschikbaar gestelde beveiligingsupdates te installeren en uw systeem op aanwezigheid van webshells te controleren. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "high",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "general",
"text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
"title": "CWE-367"
},
{
"category": "general",
"text": "Path Traversal: \u0027.../...//\u0027",
"title": "CWE-35"
},
{
"category": "general",
"text": "Insecure Inherited Permissions",
"title": "CWE-277"
},
{
"category": "general",
"text": "Storage of Sensitive Data in a Mechanism without Access Control",
"title": "CWE-921"
},
{
"category": "general",
"text": "External Control of Assumed-Immutable Web Parameter",
"title": "CWE-472"
},
{
"category": "general",
"text": "Cleartext Transmission of Sensitive Information",
"title": "CWE-319"
},
{
"category": "general",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "general",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "general",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "Incorrect Permission Assignment for Critical Resource",
"title": "CWE-732"
},
{
"category": "general",
"text": "Unrestricted Upload of File with Dangerous Type",
"title": "CWE-434"
},
{
"category": "general",
"text": "Cross-Site Request Forgery (CSRF)",
"title": "CWE-352"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - certbundde",
"url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/april-2025.html"
},
{
"category": "external",
"summary": "Reference - cisagov; cveprojectv5; nvd",
"url": "https://me.sap.com/notes/3594142"
},
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://reliaquest.com/blog/threat-spotlight-reliaquest-uncovers-vulnerability-behind-sap-netweaver-compromise/"
},
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://onapsis.com/blog/active-exploitation-of-sap-vulnerability-cve-2025-31324/"
}
],
"title": "Kwetsbaarheden verholpen in SAP-producten",
"tracking": {
"current_release_date": "2025-04-30T13:12:27.070565Z",
"generator": {
"date": "2025-02-25T15:15:00Z",
"engine": {
"name": "V.A.",
"version": "1.0"
}
},
"id": "NCSC-2025-0119",
"initial_release_date": "2025-04-09T09:12:05.705017Z",
"revision_history": [
{
"date": "2025-04-09T09:12:05.705017Z",
"number": "1.0.0",
"summary": "Initiele versie"
},
{
"date": "2025-04-25T12:10:29.929217Z",
"number": "1.0.1",
"summary": "SAP heeft een update op de advisorie van eerder deze maand"
},
{
"date": "2025-04-28T09:35:57.213875Z",
"number": "1.0.2",
"summary": "Meldingen van misbruik van CVE-2025-31324."
},
{
"date": "2025-04-30T13:12:27.070565Z",
"number": "1.0.3",
"summary": "New revision"
}
],
"status": "final",
"version": "1.0.3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/10.0",
"product": {
"name": "vers:unknown/10.0",
"product_id": "CSAFPID-426681",
"product_identification_helper": {
"cpe": "cpe:2.3:a:sap:sap_businessobjects_financial_consolidation:10.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.0.0.1933",
"product": {
"name": "vers:unknown/10.0.0.1933",
"product_id": "CSAFPID-367586"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1",
"product": {
"name": "vers:unknown/10.1",
"product_id": "CSAFPID-426682",
"product_identification_helper": {
"cpe": "cpe:2.3:a:sap:sap_businessobjects_financial_consolidation:10.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-336862"
}
}
],
"category": "product_name",
"name": "BusinessObjects Financial Consolidation"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/2.00",
"product": {
"name": "vers:unknown/2.00",
"product_id": "CSAFPID-426483",
"product_identification_helper": {
"cpe": "cpe:2.3:a:sap_se:sap_erp_financials_information_system:2.00:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "ERP Financials Information System"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/6.0",
"product": {
"name": "vers:unknown/6.0",
"product_id": "CSAFPID-447161"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/6.03",
"product": {
"name": "vers:unknown/6.03",
"product_id": "CSAFPID-447167"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/6.04",
"product": {
"name": "vers:unknown/6.04",
"product_id": "CSAFPID-447158"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/6.05",
"product": {
"name": "vers:unknown/6.05",
"product_id": "CSAFPID-447155"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/6.06",
"product": {
"name": "vers:unknown/6.06",
"product_id": "CSAFPID-447160"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/6.16",
"product": {
"name": "vers:unknown/6.16",
"product_id": "CSAFPID-447163"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/6.17",
"product": {
"name": "vers:unknown/6.17",
"product_id": "CSAFPID-447165"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/6.18",
"product": {
"name": "vers:unknown/6.18",
"product_id": "CSAFPID-447156"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/8.0",
"product": {
"name": "vers:unknown/8.0",
"product_id": "CSAFPID-447164"
}
}
],
"category": "product_name",
"name": "Enterprise Extension Financial Services"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-710027"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/6.05",
"product": {
"name": "vers:unknown/6.05",
"product_id": "CSAFPID-426703"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/6.06",
"product": {
"name": "vers:unknown/6.06",
"product_id": "CSAFPID-426706"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/6.16",
"product": {
"name": "vers:unknown/6.16",
"product_id": "CSAFPID-426707"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/6.17",
"product": {
"name": "vers:unknown/6.17",
"product_id": "CSAFPID-426708"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/6.18",
"product": {
"name": "vers:unknown/6.18",
"product_id": "CSAFPID-426704"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/8.0",
"product": {
"name": "vers:unknown/8.0",
"product_id": "CSAFPID-426705"
}
}
],
"category": "product_name",
"name": "Enterprise Financial Services"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/10.0",
"product": {
"name": "vers:unknown/10.0",
"product_id": "CSAFPID-447141"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1",
"product": {
"name": "vers:unknown/10.1",
"product_id": "CSAFPID-447140"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/1010",
"product": {
"name": "vers:unknown/1010",
"product_id": "CSAFPID-847883",
"product_identification_helper": {
"cpe": "cpe:2.3:a:sap:financial_consolidation:1010:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Financial Consolidation"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/10.1",
"product": {
"name": "vers:unknown/10.1",
"product_id": "CSAFPID-426837"
}
}
],
"category": "product_name",
"name": "Financial Consolidation Cube Designer"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1176052"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/unknown",
"product": {
"name": "vers:unknown/unknown",
"product_id": "CSAFPID-1333259"
}
}
],
"category": "product_name",
"name": "NetWeaver"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/7.50",
"product": {
"name": "vers:unknown/7.50",
"product_id": "CSAFPID-2351307"
}
}
],
"category": "product_name",
"name": "NetWeaver (SAP Enterprise Portal)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/700",
"product": {
"name": "vers:unknown/700",
"product_id": "CSAFPID-2538790"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/701",
"product": {
"name": "vers:unknown/701",
"product_id": "CSAFPID-2538791"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/702",
"product": {
"name": "vers:unknown/702",
"product_id": "CSAFPID-2538792"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/731",
"product": {
"name": "vers:unknown/731",
"product_id": "CSAFPID-2538793"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/740",
"product": {
"name": "vers:unknown/740",
"product_id": "CSAFPID-2538794"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/750",
"product": {
"name": "vers:unknown/750",
"product_id": "CSAFPID-2538799"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/751",
"product": {
"name": "vers:unknown/751",
"product_id": "CSAFPID-2538800"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/752",
"product": {
"name": "vers:unknown/752",
"product_id": "CSAFPID-2538801"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/753",
"product": {
"name": "vers:unknown/753",
"product_id": "CSAFPID-2538802"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/754",
"product": {
"name": "vers:unknown/754",
"product_id": "CSAFPID-2538803"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/755",
"product": {
"name": "vers:unknown/755",
"product_id": "CSAFPID-2538804"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/756",
"product": {
"name": "vers:unknown/756",
"product_id": "CSAFPID-2538805"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/757",
"product": {
"name": "vers:unknown/757",
"product_id": "CSAFPID-2538806"
}
}
],
"category": "product_name",
"name": "NetWeaver AS ABAP (BSP Framework)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/700",
"product": {
"name": "vers:unknown/700",
"product_id": "CSAFPID-2538773"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/701",
"product": {
"name": "vers:unknown/701",
"product_id": "CSAFPID-2538774"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/702",
"product": {
"name": "vers:unknown/702",
"product_id": "CSAFPID-2538775"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/731",
"product": {
"name": "vers:unknown/731",
"product_id": "CSAFPID-2538776"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/740",
"product": {
"name": "vers:unknown/740",
"product_id": "CSAFPID-2538777"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/750",
"product": {
"name": "vers:unknown/750",
"product_id": "CSAFPID-2538778"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/751",
"product": {
"name": "vers:unknown/751",
"product_id": "CSAFPID-2538779"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/752",
"product": {
"name": "vers:unknown/752",
"product_id": "CSAFPID-2538780"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/75c",
"product": {
"name": "vers:unknown/75c",
"product_id": "CSAFPID-2538781"
}
}
],
"category": "product_name",
"name": "NetWeaver AS ABAP (Business Server Pages application)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1307450"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/1808",
"product": {
"name": "vers:unknown/1808",
"product_id": "CSAFPID-1297130"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/1811",
"product": {
"name": "vers:unknown/1811",
"product_id": "CSAFPID-1297107"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/1905",
"product": {
"name": "vers:unknown/1905",
"product_id": "CSAFPID-1230533"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2001 zh",
"product": {
"name": "vers:unknown/2001 zh",
"product_id": "CSAFPID-1921506"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2005",
"product": {
"name": "vers:unknown/2005",
"product_id": "CSAFPID-1230555"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2011",
"product": {
"name": "vers:unknown/2011",
"product_id": "CSAFPID-1230719"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2105",
"product": {
"name": "vers:unknown/2105",
"product_id": "CSAFPID-1230702"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2205",
"product": {
"name": "vers:unknown/2205",
"product_id": "CSAFPID-1304671"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2211",
"product": {
"name": "vers:unknown/2211",
"product_id": "CSAFPID-1921487"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/6.7",
"product": {
"name": "vers:unknown/6.7",
"product_id": "CSAFPID-1297186"
}
}
],
"category": "product_name",
"name": "Commerce"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/2205 hy_com",
"product": {
"name": "vers:unknown/2205 hy_com",
"product_id": "CSAFPID-2473272"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2211",
"product": {
"name": "vers:unknown/2211",
"product_id": "CSAFPID-2473273"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/none",
"product": {
"name": "vers:unknown/none",
"product_id": "CSAFPID-1306891"
}
}
],
"category": "product_name",
"name": "Commerce Cloud"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1306888"
}
}
],
"category": "product_name",
"name": "Landscape Management"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/7.0",
"product": {
"name": "vers:unknown/7.0",
"product_id": "CSAFPID-2352521"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.10",
"product": {
"name": "vers:unknown/7.10",
"product_id": "CSAFPID-2352520"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.20",
"product": {
"name": "vers:unknown/7.20",
"product_id": "CSAFPID-1304029"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.40",
"product": {
"name": "vers:unknown/7.40",
"product_id": "CSAFPID-2352519"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/720",
"product": {
"name": "vers:unknown/720",
"product_id": "CSAFPID-2539577"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/740",
"product": {
"name": "vers:unknown/740",
"product_id": "CSAFPID-2352518"
}
}
],
"category": "product_name",
"name": "Solution Manager"
}
],
"category": "product_family",
"name": "SAP"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/com_cloud 2211",
"product": {
"name": "vers:unknown/com_cloud 2211",
"product_id": "CSAFPID-1988023"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/hy_com 2205",
"product": {
"name": "vers:unknown/hy_com 2205",
"product_id": "CSAFPID-1988024"
}
}
],
"category": "product_name",
"name": "Commerce"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1175835"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2211",
"product": {
"name": "vers:unknown/2211",
"product_id": "CSAFPID-2632442"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/com_cloud 2211",
"product": {
"name": "vers:unknown/com_cloud 2211",
"product_id": "CSAFPID-2632443"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/com_cloud 2211|hy_com 2205",
"product": {
"name": "vers:unknown/com_cloud 2211|hy_com 2205",
"product_id": "CSAFPID-1425816"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/hy_com 2205",
"product": {
"name": "vers:unknown/hy_com 2205",
"product_id": "CSAFPID-2632444"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/unknown",
"product": {
"name": "vers:unknown/unknown",
"product_id": "CSAFPID-1332128"
}
}
],
"category": "product_name",
"name": "Commerce Cloud"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/1808",
"product": {
"name": "vers:unknown/1808",
"product_id": "CSAFPID-605062"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/1811",
"product": {
"name": "vers:unknown/1811",
"product_id": "CSAFPID-605061"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/1905",
"product": {
"name": "vers:unknown/1905",
"product_id": "CSAFPID-605064"
}
}
],
"category": "product_name",
"name": "Commerce Data Hub"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/7.00",
"product": {
"name": "vers:unknown/7.00",
"product_id": "CSAFPID-345584"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.01",
"product": {
"name": "vers:unknown/7.01",
"product_id": "CSAFPID-345586"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.02",
"product": {
"name": "vers:unknown/7.02",
"product_id": "CSAFPID-345588"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.10",
"product": {
"name": "vers:unknown/7.10",
"product_id": "CSAFPID-345621"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.11",
"product": {
"name": "vers:unknown/7.11",
"product_id": "CSAFPID-345620"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.30",
"product": {
"name": "vers:unknown/7.30",
"product_id": "CSAFPID-345590"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.31",
"product": {
"name": "vers:unknown/7.31",
"product_id": "CSAFPID-345585"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.40",
"product": {
"name": "vers:unknown/7.40",
"product_id": "CSAFPID-345591"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.50",
"product": {
"name": "vers:unknown/7.50",
"product_id": "CSAFPID-345592"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.51",
"product": {
"name": "vers:unknown/7.51",
"product_id": "CSAFPID-345589"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.52",
"product": {
"name": "vers:unknown/7.52",
"product_id": "CSAFPID-345587"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.53",
"product": {
"name": "vers:unknown/7.53",
"product_id": "CSAFPID-426833"
}
}
],
"category": "product_name",
"name": "Business Application Software Integrated Solution"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/2.0",
"product": {
"name": "vers:unknown/2.0",
"product_id": "CSAFPID-710118"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2011_1_710",
"product": {
"name": "vers:unknown/2011_1_710",
"product_id": "CSAFPID-2632409"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2011_1_730",
"product": {
"name": "vers:unknown/2011_1_730",
"product_id": "CSAFPID-2632410"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2011_1_731",
"product": {
"name": "vers:unknown/2011_1_731",
"product_id": "CSAFPID-2632411"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/dmis 2011_1_700",
"product": {
"name": "vers:unknown/dmis 2011_1_700",
"product_id": "CSAFPID-2632412"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/dmis_2011_1_700",
"product": {
"name": "vers:unknown/dmis_2011_1_700",
"product_id": "CSAFPID-2633939"
}
}
],
"category": "product_name",
"name": "Landscape Transformation"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/7.10",
"product": {
"name": "vers:unknown/7.10",
"product_id": "CSAFPID-426454"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.20",
"product": {
"name": "vers:unknown/7.20",
"product_id": "CSAFPID-426453"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.30",
"product": {
"name": "vers:unknown/7.30",
"product_id": "CSAFPID-426456"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.31",
"product": {
"name": "vers:unknown/7.31",
"product_id": "CSAFPID-426455"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.40",
"product": {
"name": "vers:unknown/7.40",
"product_id": "CSAFPID-426457"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.5",
"product": {
"name": "vers:unknown/7.5",
"product_id": "CSAFPID-1295436",
"product_identification_helper": {
"cpe": "cpe:2.3:a:sap:netweaver_system_landscape_directory:7.5:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Netweaver System Landscape Directory"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/3.0",
"product": {
"name": "vers:unknown/3.0",
"product_id": "CSAFPID-2118594"
}
}
],
"category": "product_name",
"name": "landscape_management"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1176305"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/720",
"product": {
"name": "vers:unknown/720",
"product_id": "CSAFPID-2538090"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis 700",
"product": {
"name": "vers:unknown/sap_basis 700",
"product_id": "CSAFPID-2632425"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis 701",
"product": {
"name": "vers:unknown/sap_basis 701",
"product_id": "CSAFPID-2632426"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis 702",
"product": {
"name": "vers:unknown/sap_basis 702",
"product_id": "CSAFPID-2632427"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis 731",
"product": {
"name": "vers:unknown/sap_basis 731",
"product_id": "CSAFPID-2632428"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/sap_basis 740",
"product": {
"name": "vers:unknown/sap_basis 740",
"product_id": "CSAFPID-2632429"
}
}
],
"category": "product_name",
"name": "Solution Manager"
}
],
"category": "vendor",
"name": "SAP"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/unknown",
"product": {
"name": "vers:unknown/unknown",
"product_id": "CSAFPID-2364492",
"product_identification_helper": {
"cpe": "cpe:/a:atoss:staff_efficiency_suite:-"
}
}
}
],
"category": "product_name",
"name": "ATOSS Staff Efficiency Suite"
}
],
"category": "vendor",
"name": "ATOSS"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/unknown",
"product": {
"name": "vers:unknown/unknown",
"product_id": "CSAFPID-1330296",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "product_name",
"name": "Amazon Linux 2"
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/\u003c10.1.34",
"product": {
"name": "vers:unknown/\u003c10.1.34",
"product_id": "CSAFPID-1459777"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003c11.0.2",
"product": {
"name": "vers:unknown/\u003c11.0.2",
"product_id": "CSAFPID-1459778"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003c9.0.98",
"product": {
"name": "vers:unknown/\u003c9.0.98",
"product_id": "CSAFPID-1459779"
}
}
],
"category": "product_name",
"name": "Tomcat"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=10.1.0 milestone1|\u003c=10.1.33",
"product": {
"name": "vers:unknown/\u003e=10.1.0 milestone1|\u003c=10.1.33",
"product_id": "CSAFPID-1861039"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=11.0.0 milestone1|\u003c=11.0.1",
"product": {
"name": "vers:unknown/\u003e=11.0.0 milestone1|\u003c=11.0.1",
"product_id": "CSAFPID-1861040"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=9.0.0 milestone1|\u003c=9.0.97",
"product": {
"name": "vers:unknown/\u003e=9.0.0 milestone1|\u003c=9.0.97",
"product_id": "CSAFPID-1861041"
}
}
],
"category": "product_name",
"name": "Tomcat"
}
],
"category": "product_family",
"name": "Apache"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/10.1.0",
"product": {
"name": "vers:unknown/10.1.0",
"product_id": "CSAFPID-2140760"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.1",
"product": {
"name": "vers:unknown/10.1.1",
"product_id": "CSAFPID-2140804"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.10",
"product": {
"name": "vers:unknown/10.1.10",
"product_id": "CSAFPID-2140795"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.11",
"product": {
"name": "vers:unknown/10.1.11",
"product_id": "CSAFPID-2140773"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.12",
"product": {
"name": "vers:unknown/10.1.12",
"product_id": "CSAFPID-2140818"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.13",
"product": {
"name": "vers:unknown/10.1.13",
"product_id": "CSAFPID-2140755"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.14",
"product": {
"name": "vers:unknown/10.1.14",
"product_id": "CSAFPID-2140803"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.15",
"product": {
"name": "vers:unknown/10.1.15",
"product_id": "CSAFPID-2140852"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.16",
"product": {
"name": "vers:unknown/10.1.16",
"product_id": "CSAFPID-2140842"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.17",
"product": {
"name": "vers:unknown/10.1.17",
"product_id": "CSAFPID-2140814"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.18",
"product": {
"name": "vers:unknown/10.1.18",
"product_id": "CSAFPID-2140749"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.19",
"product": {
"name": "vers:unknown/10.1.19",
"product_id": "CSAFPID-2140796"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.2",
"product": {
"name": "vers:unknown/10.1.2",
"product_id": "CSAFPID-2140856"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.20",
"product": {
"name": "vers:unknown/10.1.20",
"product_id": "CSAFPID-2140834"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.21",
"product": {
"name": "vers:unknown/10.1.21",
"product_id": "CSAFPID-2140851"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.22",
"product": {
"name": "vers:unknown/10.1.22",
"product_id": "CSAFPID-2140742"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/10.1.23",
"product": {
"name": "vers:unknown/10.1.23",
"product_id": "CSAFPID-2140825"
}
}
],
"category": "product_name",
"name": "tomcat"
}
],
"category": "vendor",
"name": "Apache"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/103",
"product": {
"name": "vers:unknown/103",
"product_id": "CSAFPID-2631681"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/104",
"product": {
"name": "vers:unknown/104",
"product_id": "CSAFPID-2631682"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/105",
"product": {
"name": "vers:unknown/105",
"product_id": "CSAFPID-2631683"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/106",
"product": {
"name": "vers:unknown/106",
"product_id": "CSAFPID-2631684"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/107",
"product": {
"name": "vers:unknown/107",
"product_id": "CSAFPID-2631685"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/108",
"product": {
"name": "vers:unknown/108",
"product_id": "CSAFPID-2631686"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/s4core102",
"product": {
"name": "vers:unknown/s4core102",
"product_id": "CSAFPID-2631680"
}
}
],
"category": "product_name",
"name": "SAP S/4HANA (Private Cloud)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/2011_1_710",
"product": {
"name": "vers:unknown/2011_1_710",
"product_id": "CSAFPID-2631732"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2011_1_730",
"product": {
"name": "vers:unknown/2011_1_730",
"product_id": "CSAFPID-2631733"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2011_1_731",
"product": {
"name": "vers:unknown/2011_1_731",
"product_id": "CSAFPID-2631734"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/dmis2011_1_700",
"product": {
"name": "vers:unknown/dmis2011_1_700",
"product_id": "CSAFPID-2631731"
}
}
],
"category": "product_name",
"name": "SAP Landscape Transformation (Analysis Platform)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/lm-sld 7.5",
"product": {
"name": "vers:unknown/lm-sld 7.5",
"product_id": "CSAFPID-1295163"
}
}
],
"category": "product_name",
"name": "SAP NetWeaver AS Java (System Landscape Directory)"
}
],
"category": "vendor",
"name": "SAP_SE"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-735564"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/3.0",
"product": {
"name": "vers:unknown/3.0",
"product_id": "CSAFPID-446586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:sap:landscape_management:3.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/3.00",
"product": {
"name": "vers:unknown/3.00",
"product_id": "CSAFPID-1111431"
}
}
],
"category": "product_name",
"name": "landscape_management"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/1.0",
"product": {
"name": "vers:unknown/1.0",
"product_id": "CSAFPID-710125"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2.0",
"product": {
"name": "vers:unknown/2.0",
"product_id": "CSAFPID-710119"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/3.0",
"product": {
"name": "vers:unknown/3.0",
"product_id": "CSAFPID-710115"
}
}
],
"category": "product_name",
"name": "landscape_transformation_replication_server"
}
],
"category": "vendor",
"name": "sap"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-56337",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"notes": [
{
"category": "other",
"text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
"title": "CWE-367"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-56337",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-56337.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2024-56337"
},
{
"cve": "CVE-2025-0064",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"notes": [
{
"category": "other",
"text": "Incorrect Permission Assignment for Critical Resource",
"title": "CWE-732"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-0064",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-0064.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-0064"
},
{
"cve": "CVE-2025-23186",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-23186",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23186.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-23186"
},
{
"cve": "CVE-2025-26653",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-26653",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26653.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-26653"
},
{
"cve": "CVE-2025-26654",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "other",
"text": "Cleartext Transmission of Sensitive Information",
"title": "CWE-319"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-26654",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26654.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-26654"
},
{
"cve": "CVE-2025-26657",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-26657",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26657.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-26657"
},
{
"cve": "CVE-2025-27428",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-27428",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27428.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-27428"
},
{
"cve": "CVE-2025-27429",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-27429",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27429.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-27429"
},
{
"cve": "CVE-2025-27430",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"notes": [
{
"category": "other",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-27430",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27430.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-27430"
},
{
"cve": "CVE-2025-27435",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-27435",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27435.json"
}
],
"title": "CVE-2025-27435"
},
{
"cve": "CVE-2025-27437",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-27437",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27437.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-27437"
},
{
"cve": "CVE-2025-30013",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30013",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30013.json"
}
],
"title": "CVE-2025-30013"
},
{
"cve": "CVE-2025-30014",
"cwe": {
"id": "CWE-35",
"name": "Path Traversal: \u0027.../...//\u0027"
},
"notes": [
{
"category": "other",
"text": "Path Traversal: \u0027.../...//\u0027",
"title": "CWE-35"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30014",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30014.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-30014"
},
{
"cve": "CVE-2025-30015",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30015",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30015.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-30015"
},
{
"cve": "CVE-2025-30016",
"cwe": {
"id": "CWE-921",
"name": "Storage of Sensitive Data in a Mechanism without Access Control"
},
"notes": [
{
"category": "other",
"text": "Storage of Sensitive Data in a Mechanism without Access Control",
"title": "CWE-921"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30016",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30016.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-30016"
},
{
"cve": "CVE-2025-30017",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30017",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30017.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-30017"
},
{
"cve": "CVE-2025-31324",
"cwe": {
"id": "CWE-434",
"name": "Unrestricted Upload of File with Dangerous Type"
},
"notes": [
{
"category": "other",
"text": "Unrestricted Upload of File with Dangerous Type",
"title": "CWE-434"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-31324",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31324.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-31324"
},
{
"cve": "CVE-2025-31327",
"cwe": {
"id": "CWE-472",
"name": "External Control of Assumed-Immutable Web Parameter"
},
"notes": [
{
"category": "other",
"text": "External Control of Assumed-Immutable Web Parameter",
"title": "CWE-472"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-31327",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31327.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-31327"
},
{
"cve": "CVE-2025-31328",
"cwe": {
"id": "CWE-352",
"name": "Cross-Site Request Forgery (CSRF)"
},
"notes": [
{
"category": "other",
"text": "Cross-Site Request Forgery (CSRF)",
"title": "CWE-352"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-31328",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31328.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-31328"
},
{
"cve": "CVE-2025-31330",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-31330",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31330.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-31330"
},
{
"cve": "CVE-2025-31331",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-31331",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31331.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-31331"
},
{
"cve": "CVE-2025-31332",
"cwe": {
"id": "CWE-277",
"name": "Insecure Inherited Permissions"
},
"notes": [
{
"category": "other",
"text": "Insecure Inherited Permissions",
"title": "CWE-277"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-31332",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31332.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-31332"
},
{
"cve": "CVE-2025-31333",
"cwe": {
"id": "CWE-472",
"name": "External Control of Assumed-Immutable Web Parameter"
},
"notes": [
{
"category": "other",
"text": "External Control of Assumed-Immutable Web Parameter",
"title": "CWE-472"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-31333",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31333.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-426681",
"CSAFPID-367586",
"CSAFPID-426682",
"CSAFPID-426483",
"CSAFPID-447161",
"CSAFPID-447167",
"CSAFPID-447158",
"CSAFPID-447155",
"CSAFPID-447160",
"CSAFPID-447163",
"CSAFPID-447165",
"CSAFPID-447156",
"CSAFPID-447164",
"CSAFPID-710027",
"CSAFPID-426703",
"CSAFPID-426706",
"CSAFPID-426707",
"CSAFPID-426708",
"CSAFPID-426704",
"CSAFPID-426705",
"CSAFPID-447141",
"CSAFPID-447140",
"CSAFPID-847883",
"CSAFPID-426837",
"CSAFPID-1176052",
"CSAFPID-1333259",
"CSAFPID-2351307",
"CSAFPID-2538790",
"CSAFPID-2538791",
"CSAFPID-2538792",
"CSAFPID-2538793",
"CSAFPID-2538794",
"CSAFPID-2538799",
"CSAFPID-2538800",
"CSAFPID-2538801",
"CSAFPID-2538802",
"CSAFPID-2538803",
"CSAFPID-2538804",
"CSAFPID-2538805",
"CSAFPID-2538806",
"CSAFPID-2538773",
"CSAFPID-2538774",
"CSAFPID-2538775",
"CSAFPID-2538776",
"CSAFPID-2538777",
"CSAFPID-2538778",
"CSAFPID-2538779",
"CSAFPID-2538780",
"CSAFPID-2538781",
"CSAFPID-1307450",
"CSAFPID-1297130",
"CSAFPID-1297107",
"CSAFPID-1230533",
"CSAFPID-1921506",
"CSAFPID-1230555",
"CSAFPID-1230719",
"CSAFPID-1230702",
"CSAFPID-1304671",
"CSAFPID-1921487",
"CSAFPID-1297186",
"CSAFPID-1988023",
"CSAFPID-1988024",
"CSAFPID-1175835",
"CSAFPID-2473272",
"CSAFPID-2632442",
"CSAFPID-2473273",
"CSAFPID-2632443",
"CSAFPID-1425816",
"CSAFPID-2632444",
"CSAFPID-1306891",
"CSAFPID-1332128",
"CSAFPID-605062",
"CSAFPID-605061",
"CSAFPID-605064",
"CSAFPID-345584",
"CSAFPID-345586",
"CSAFPID-2364492",
"CSAFPID-1330296",
"CSAFPID-1459777",
"CSAFPID-1459778",
"CSAFPID-1459779",
"CSAFPID-1861039",
"CSAFPID-1861040",
"CSAFPID-1861041",
"CSAFPID-2140760",
"CSAFPID-2140804",
"CSAFPID-2140795",
"CSAFPID-2140773",
"CSAFPID-2140818",
"CSAFPID-2140755",
"CSAFPID-2140803",
"CSAFPID-2140852",
"CSAFPID-2140842",
"CSAFPID-2140814",
"CSAFPID-2140749",
"CSAFPID-2140796",
"CSAFPID-2140856",
"CSAFPID-2140834",
"CSAFPID-2140851",
"CSAFPID-2140742",
"CSAFPID-2140825",
"CSAFPID-2631681",
"CSAFPID-2631682",
"CSAFPID-2631683",
"CSAFPID-2631684",
"CSAFPID-2631685",
"CSAFPID-2631686",
"CSAFPID-2631680",
"CSAFPID-1306888",
"CSAFPID-710118",
"CSAFPID-2632409",
"CSAFPID-2632410",
"CSAFPID-2632411",
"CSAFPID-2632412",
"CSAFPID-2633939",
"CSAFPID-426454",
"CSAFPID-426453",
"CSAFPID-426456",
"CSAFPID-426455",
"CSAFPID-426457",
"CSAFPID-1295436",
"CSAFPID-2118594",
"CSAFPID-2631732",
"CSAFPID-2631733",
"CSAFPID-2631734",
"CSAFPID-2631731",
"CSAFPID-1295163",
"CSAFPID-735564",
"CSAFPID-446586",
"CSAFPID-1111431",
"CSAFPID-710125",
"CSAFPID-710119",
"CSAFPID-710115",
"CSAFPID-336862",
"CSAFPID-345588",
"CSAFPID-345621",
"CSAFPID-345620",
"CSAFPID-345590",
"CSAFPID-345585",
"CSAFPID-345591",
"CSAFPID-345592",
"CSAFPID-345589",
"CSAFPID-345587",
"CSAFPID-426833",
"CSAFPID-1176305",
"CSAFPID-2352521",
"CSAFPID-2352520",
"CSAFPID-1304029",
"CSAFPID-2352519",
"CSAFPID-2538090",
"CSAFPID-2539577",
"CSAFPID-2352518",
"CSAFPID-2632425",
"CSAFPID-2632426",
"CSAFPID-2632427",
"CSAFPID-2632428",
"CSAFPID-2632429"
]
}
],
"title": "CVE-2025-31333"
}
]
}
ghsa-535h-62c3-g4j6
Vulnerability from github
Published
2025-03-11 03:30
Modified
2025-03-11 03:30
Severity ?
VLAI Severity ?
Details
Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability
{
"affected": [],
"aliases": [
"CVE-2025-27430"
],
"database_specific": {
"cwe_ids": [
"CWE-918"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-11T01:15:36Z",
"severity": "LOW"
},
"details": "Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application\u0027s confidentiality. There is no impact on integrity or availability",
"id": "GHSA-535h-62c3-g4j6",
"modified": "2025-03-11T03:30:50Z",
"published": "2025-03-11T03:30:50Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27430"
},
{
"type": "WEB",
"url": "https://me.sap.com/notes/3561861"
},
{
"type": "WEB",
"url": "https://url.sap/sapsecuritypatchday"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"type": "CVSS_V3"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…