CVE-2025-40831

MediumCVSS 6.5/10Last modified Oct 23, 2026

Description

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report functionality.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Dec 9, 2025
Last modified: Oct 23, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-408337.5The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an CVE-2025-408345.7A vulnerability has been identified in Mendix RichText (All versions >= V4.0.0 < V4.6.1). Affected widget does not properly neutralize the i CVE-2025-408369.8Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute command CVE-2025-408378.8Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with CVE-2025-408387.5Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if exploited can lead t CVE-2025-40845.7Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command CVE-2025-408414.3Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Request Forgery (CSRF) vulnerability which, if exploited, can l CVE-2025-408426.1Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to CVE-2025-408437.8CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. CodeChecker vers CVE-2025-408467.1Improper Input Validation, the returnUrl parameter in Account Security Settings lacks proper input validation, allowing attackers to redirec CVE-2025-40857.1An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or esca CVE-2025-40866.5A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in th