CVE-2025-0001

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Abacus ERP is versions older than 2024.210.16036, 2023.205.15833, 2022.105.15542 are affected by an authenticated arbitrary file read vulnerability.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-36

Affected software

VendorProductVersions
Abacus Research AGAbacus< 2024.210.16036; < 2023.205.15833; < 2022.205.15542

References

Timeline

Published
Feb 17, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-00037.3Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in CVE-2025-00057.3Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resultingCVE-2025-00075.7Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel spaceCVE-2025-00088.4Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in unauCVE-2025-00095.5A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potentially resulting in a sysCVE-2025-00106.1An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confidenCVE-2025-00113.3Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address CVE-2025-00126.8Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory could allow a privileged CVE-2025-00147.3Incorrect default permissions on the AMD Ryzen(TM) AI installation folder could allow an attacker to achieve privilege escalation, potentialCVE-2025-00157.8Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-priCVE-2025-00275.9Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map TableCVE-2025-00288.3An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address
CVE-2025-0001: Medium severity, CVSS 6.5 | Vulnix