CVE-2025-20022

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

Insufficient control flow management for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow a privileged user to potentially enable information disclosure via adjacent access.

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-691

Affected software

No affected versions have been published.

Timeline

Published: May 13, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-200236.7Incorrect default permissions for some Intel(R) Graphics Driver software installers may allow an authenticated user to potentially enable es CVE-2025-200245.3in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. Thi CVE-2025-200254.4Uncontrolled recursion for some TinyCBOR libraries maintained by Intel(R) before version 0.6.1 may allow an authenticated user to potentiall CVE-2025-200266.1Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to po CVE-2025-200277.1Improper input validation in the UEFI WheaERST module for some Intel(R) reference platforms may allow an escalation of privilege. System sof CVE-2025-200287.1Time-of-check time-of-use race condition in the WheaERST SMM module for some Intel(R) reference platforms may allow an escalation of privile CVE-2025-200298.8Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker CVE-2025-20037.1Incorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an authenticated user to bypass the 'add in root' p CVE-2025-200302.6Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow a CVE-2025-200316.5Improper input validation for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via loc CVE-2025-200327.9Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to p CVE-2025-200336.5Mattermost versions 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate post types, which allows attacker