CVE-2025-52925

5.0 mediumEPSS 0.2%

Medium (5.0). EPSS 0.2% chance of exploitation in the next 30 days.

In One Identity OneLogin Active Directory Connector before 6.1.5, encryption of the DirectoryToken was mishandled, aka ST-812.

Severity

5.0 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
CWE: CWE-402
Published: 2025-07-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19