CVE-2025-47222

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2. Setting any chosen class name to any of the properties requiring a class path and the provided class is not expected to return different errors if the class exists in deployment or not. This returns information about the classes loaded in the application or not to the clientside.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Nov 13, 2025
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-472263.3Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information.CVE-2025-472277.5In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandle CVE-2025-472286.7In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows a CVE-2025-472295.5libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and applicatio CVE-2025-47239.8A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unkno CVE-2025-47249.8A vulnerability, which was classified as critical, has been found in itsourcecode Placement Management System 1.0. Affected by this issue is CVE-2025-472414.0In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authority CVE-2025-472447.3Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer, as demonstrated by c CVE-2025-472458.1In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.CVE-2025-47259.8A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. This affects an unknown part o CVE-2025-472565.6Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha format tracker module in CVE-2025-47269.8A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. This vulnerability affects unknow