CVE-2025-8532

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

Authorization Bypass Through User-Controlled Key, Improper Authorization vulnerability in Bimser Solution Software Trade Inc. EBA Document and Workflow Management System allows Forceful Browsing.

This issue affects eBA Document and Workflow Management System: from 6.7.164 before 6.7.166.

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N

Weakness enumeration

CWE-285 CWE-639

Affected software

Vendor	Product	Versions
Bimser Solution Software Trade Inc.	eBA Document and Workflow Management System	>= 6.7.164, < 6.7.166

References

Timeline

Published: Sep 19, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-85336.9A vulnerability was identified in the XPC services of Fantastical. The services failed to implement proper client authorization checks in it CVE-2025-85342.5A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PS_Lvl2page of the file tools/CVE-2025-85359.0A vulnerability, which was classified as problematic, has been found in cronoh NanoVault up to 1.2.1. This issue affects the function execut CVE-2025-85369.3A SQL injection vulnerability has been identified in DobryCMS. Improper neutralization of input provided by user into language functionality CVE-2025-85375.9A vulnerability, which was classified as problematic, was found in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_DataBuffer CVE-2025-85384.8A security flaw has been discovered in Portabilis i-Educar 2.10. The impacted element is an unknown function of the file /usuarios/tipos/nov CVE-2025-85394.8A weakness has been identified in Portabilis i-Educar 2.10. This affects an unknown function of the file /intranet/public_distrito_cad.php. CVE-2025-85404.8A vulnerability was found in Portabilis i-Educar 2.10. It has been classified as problematic. This affects an unknown part of the file /intr CVE-2025-85414.8A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. This vulnerability affects unknown code of the f CVE-2025-85424.8A vulnerability was found in Portabilis i-Educar 2.10. It has been rated as problematic. This issue affects some unknown processing of the f CVE-2025-85434.8A vulnerability classified as problematic has been found in Portabilis i-Educar 2.10. Affected is an unknown function of the file /intranet/CVE-2025-85444.8A vulnerability classified as problematic was found in Portabilis i-Educar 2.10. Affected by this vulnerability is an unknown functionality