CVE-2025-27632

6.1 mediumEPSS 0.2%

Medium (6.1). EPSS 0.2% chance of exploitation in the next 30 days.

A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value in an HTTP request to leverage multiple attack vectors, including defacing the site content through web-cache poisoning.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-644
Published: 2025-03-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000210&LanguageCode=en&DocumentPartId=&Action=Launch

Check your stack JSON