CVE-2025-8322

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The e-School from Ventem has a Missing Authorization vulnerability, allowing remote attackers with regular privilege to access administrator functions, including creating, modifying, and deleting accounts. They can even escalate any account to system administrator privilege.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Jul 30, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-83238.8The e-School from Ventem has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shelCVE-2025-83249.8Zohocorp ManageEngine Analytics Plus versions 6170 and below are vulnerable to Unauthenticated SQL Injection due to the improper filter confCVE-2025-83258.8The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the 'Internal/Everyone' role can inCVE-2025-83269.8A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the fileCVE-2025-83279.8A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown funCVE-2025-83289.8A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some CVE-2025-83299.8A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an unknown part of the fiCVE-2025-83309.8A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. This vulnerability affects unknown code oCVE-2025-83319.8A vulnerability was found in code-projects Online Farm System 1.0 and classified as critical. This issue affects some unknown processing of CVE-2025-83329.8A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of thCVE-2025-83339.8A vulnerability was found in code-projects Online Farm System 1.0. It has been declared as critical. Affected by this vulnerability is an unCVE-2025-83349.8A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is so
CVE-2025-8322: High severity, CVSS 8.8 | Vulnix