CVE-2025-25060

8.2 highEPSS 0.5%

High (8.2). EPSS 0.5% chance of exploitation in the next 30 days.

Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker.

Severity

CVSS 3.0

8.2 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2025-04-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://jvn.jp/en/jp/JVN26321838/
https://www.hammock.jp/assetview/info/250325.html

Check your stack JSON