CVE-2025-11862 | THREATINT

Description

A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API.

PUBLISHED Reserved 2025-10-16 | Published 2025-11-11 | Updated 2025-11-12 | Assigner Rockwell

HIGH: 8.4CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:L/SA:H

Default status

unaffected

1.33, 1.34, 1.35, 1.36, 1.37, 1.38, 1.39, 1.40, 1.41, 1.41.1, 1.41.2, 1.41.3

affected

Download JSON