CVE-2025-15065

Exposure of Sensitive Information to an Unauthorized Actor, Missing Encryption of Sensitive Data, Files or Directories Accessible to External Parties vulnerability in Kings Information & Network Co. KESS Enterprise on Windows allows Privilege Escalation, Modify Existing Service, Modify Shared File.This issue affects KESS Enterprise: before *.25.9.19.exe

CVSS 4.0

8.6CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

CVSS 3.1

6.3CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

0.05% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-25)

CWEs

CWE-200, CWE-311, CWE-552

Published

2025-12-29

Modified

2026-10-07

Record from

the NVD, synced 2026-10-19

References

• https://www.kings.co.kr/solution/01/KESS.jsp?O=10.64&B=Chrome

Check your stackJSON