CVE-2025-2500

HighCVSS 7.4/10Last modified Jun 17, 2026

Description

A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-256

Affected software

No affected versions have been published.

Timeline

Published: May 30, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-250008.8Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute CVE-2025-250014.3Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthoriz CVE-2025-250025.7Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjace CVE-2025-250037.3Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.CVE-2025-250047.3Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.CVE-2025-250056.5Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.CVE-2025-250065.3Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a netw CVE-2025-250075.3Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over CVE-2025-250087.1Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges loca CVE-2025-250095.4Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload.CVE-2025-25017.8An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.CVE-2025-250106.5Incorrect authorization in Kibana can lead to privilege escalation via the built-in reporting_user role which incorrectly has the ability to