CVE-2025-13129

Improper Enforcement of Behavioral Workflow vulnerability in Seneka Software Hardware Information Technology Trade Contracting and Industry Ltd. Co. Onaylarım allows Functionality Misuse. This issue affects Onaylarım: from 25.09.26.01 through 18112025.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0422
https://www.usom.gov.tr/bildirim/tr-25-0422

Configurations

No configuration.

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de aplicación incorrecta del flujo de trabajo conductual en Seneka Software Hardware Information Technology Trade Contracting and Industry Ltd. Co. Onaylar?m permite el uso indebido de la funcionalidad. Este problema afecta a Onaylar?m: desde 25.09.26.01 hasta 18112025.

Information

Published : 2025-12-01 15:15

Updated : 2026-10-18 20:10

NVD link : CVE-2025-13129

Mitre link : CVE-2025-13129

CVE.ORG link : CVE-2025-13129

JSON object : View

Products Affected

No product.

CWE

CWE-841

Improper Enforcement of Behavioral Workflow

{"id": "CVE-2025-13129", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-13129", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-01T14:56:50.301007Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "Seneka Software Hardware Information Technology Trade Contracting and Industry Ltd. Co.", "product": "Onaylar\u0131m", "versions": [{"status": "affected", "version": "25.09.26.01", "versionType": "custom", "lessThanOrEqual": "18112025"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-01T15:15:48.857", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0422", "source": "iletisim@usom.gov.tr"}, {"url": "https://www.usom.gov.tr/bildirim/tr-25-0422", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-841"}]}], "descriptions": [{"lang": "en", "value": "Improper Enforcement of Behavioral Workflow vulnerability in Seneka Software Hardware Information Technology Trade Contracting and Industry Ltd. Co. Onaylar\u0131m allows Functionality Misuse.\n\nThis issue affects Onaylar\u0131m: from 25.09.26.01 through 18112025."}, {"lang": "es", "value": "Vulnerabilidad de aplicaci\u00f3n incorrecta del flujo de trabajo conductual en Seneka Software Hardware Information Technology Trade Contracting and Industry Ltd. Co. Onaylar?m permite el uso indebido de la funcionalidad. Este problema afecta a Onaylar?m: desde 25.09.26.01 hasta 18112025."}], "lastModified": "2026-10-18T20:10:00.110", "sourceIdentifier": "iletisim@usom.gov.tr"}