CVE-2025-46743

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

An authenticated user's token could be used by another source after the user had logged out prior to the token expiring.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
May 12, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-467442.7An authenticated administrator could modify the Created By username for a user accountCVE-2025-467456.5An authenticated user without user-management permissions could view other users account information.CVE-2025-467465.8An administrator could discover another account's credentials.CVE-2025-467475.7An authenticated user without user-management permissions could identify other user accounts.CVE-2025-467482.7An authenticated user attempting to change their password could do so without using the current password.CVE-2025-467494.3An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side scriCVE-2025-46756.5Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.ThCVE-2025-467504.4SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protecCVE-2025-467524.4A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to infCVE-2025-46768.8Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.ThCVE-2025-467628.1Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code. WhileCVE-2025-46776.5Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebP
CVE-2025-46743: Medium severity, CVSS 6.3 | Vulnix