CVE-2025-47817

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-472

Affected software

No affected versions have been published.

Timeline

Published
May 10, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-478184.6Flock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection.CVE-2025-478196.8Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control.CVE-2025-47828.8A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This vulnerability affectCVE-2025-478202.4Flock Safety Gunshot Detection devices before 1.3 have cleartext storage of code.CVE-2025-478214.6Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system.CVE-2025-478226.8Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper access control.CVE-2025-478234.6Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have a hardcoded password for a system.CVE-2025-478242.4Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have cleartext storage of code.CVE-2025-478274.6In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. UltimaCVE-2025-478286.4Lumi H5P-Nodejs-library before 9.3.3 omits a sanitizeHtml call for plain text strings.CVE-2025-47835.4The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML attributes of the CountdowCVE-2025-47849.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Moderec Tourtella allows SQL Injection