CVE-2025-11025

Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform allows Retrieve Embedded Sensitive Data. This issue affects Vimesoft Corporate Messaging Platform: from V1.3.0 before V2.0.0.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.6 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0300
https://www.usom.gov.tr/bildirim/tr-25-0300

Configurations

No configuration.

History

09 Oct 2026, 10:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de Inserción de Información Sensible en Datos Enviados en la Plataforma de Mensajería Corporativa Vimesoft de Vimesoft Information Technologies and Software Inc. permite Recuperar Datos Sensibles Incrustados. Este problema afecta a la Plataforma de Mensajería Corporativa Vimesoft: desde la V1.3.0 anterior a la V2.0.0.

Information

Published : 2025-09-26 13:15

Updated : 2026-10-09 10:10

NVD link : CVE-2025-11025

Mitre link : CVE-2025-11025

CVE.ORG link : CVE-2025-11025

JSON object : View

Products Affected

No product.

CWE

CWE-201

Insertion of Sensitive Information Into Sent Data

{"id": "CVE-2025-11025", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-11025", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-26T13:39:06.180229Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.6}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "Vimesoft Information Technologies and Software Inc.", "product": "Vimesoft Corporate Messaging Platform", "versions": [{"status": "affected", "version": "V1.3.0", "lessThan": "V2.0.0", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-09-26T13:15:41.540", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0300", "source": "iletisim@usom.gov.tr"}, {"url": "https://www.usom.gov.tr/bildirim/tr-25-0300", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-201"}]}], "descriptions": [{"lang": "en", "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Vimesoft Corporate Messaging Platform: from V1.3.0 before V2.0.0."}, {"lang": "es", "value": "Vulnerabilidad de Inserci\u00f3n de Informaci\u00f3n Sensible en Datos Enviados en la Plataforma de Mensajer\u00eda Corporativa Vimesoft de Vimesoft Information Technologies and Software Inc. permite Recuperar Datos Sensibles Incrustados. Este problema afecta a la Plataforma de Mensajer\u00eda Corporativa Vimesoft: desde la V1.3.0 anterior a la V2.0.0."}], "lastModified": "2026-10-09T10:10:00.193", "sourceIdentifier": "iletisim@usom.gov.tr"}