CVE-2025-2125

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic. This vulnerability affects unknown code of the file /v2/report.svc/comprovante_marcacao/?companyId=1 of the component PDF Document Handler. The manipulation of the argument nsr leads to improper control of resource identifiers. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-99CWE-639

Affected software

No affected versions have been published.

Timeline

Published
Mar 9, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-212508.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-212517.5Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2025-212528.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-212535.3Microsoft Edge for IOS and Android Spoofing VulnerabilityCVE-2025-212546.5Internet Connection Sharing (ICS) Denial of Service VulnerabilityCVE-2025-212556.6Windows Digital Media Elevation of Privilege VulnerabilityCVE-2025-212566.6Windows Digital Media Elevation of Privilege VulnerabilityCVE-2025-212575.5Windows WLAN AutoConfig Service Information Disclosure VulnerabilityCVE-2025-212586.6Windows Digital Media Elevation of Privilege VulnerabilityCVE-2025-212595.3Microsoft Outlook Spoofing VulnerabilityCVE-2025-21268.8A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical. This issue affects some unknown processingCVE-2025-212606.6Windows Digital Media Elevation of Privilege Vulnerability