> CVE-2025-2407

« BACK_TO_HOME
PUBLISHED
2025-05-27 08:15
MODIFIED
2025-05-28 15:01
EPSS (Prob. Exploit)
0.51%
Top 57.4%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-11

> DESCRIPTION

Missing Authentication & Authorization in Web-API in Mobatime AMX MTAPI v6 on IIS allows adversaries to unrestricted access via the network. The vulnerability is fixed in Version 1.5.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-2865-hh9g-w894 HIGH

Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability

AFFECTED PACKAGES:
NUGET / Microsoft.AspNetCore.App.Runtime.linux-x64
>= 6.0.0, <= 6.0.36
NUGET / Microsoft.AspNetCore.App.Runtime.win-x86
>= 6.0.0, <= 6.0.36
NUGET / Microsoft.AspNetCore.App.Runtime.win-x64
>= 6.0.0, <= 6.0.36
NUGET / Microsoft.AspNetCore.App.Runtime.win-arm64
>= 6.0.0, <= 6.0.36
NUGET / Microsoft.AspNetCore.App.Runtime.win-arm
>= 6.0.0, <= 6.0.36
NUGET / Microsoft.AspNetCore.App.Runtime.osx-x64
>= 6.0.0, <= 6.0.36
NUGET / Microsoft.AspNetCore.App.Runtime.osx-arm64
>= 6.0.0, <= 6.0.36
NUGET / Microsoft.AspNetCore.App.Runtime.linux-musl-x64
>= 6.0.0, <= 6.0.36
NUGET / Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
>= 6.0.0, <= 6.0.36
NUGET / Microsoft.AspNetCore.App.Runtime.linux-musl-arm
>= 6.0.0, <= 6.0.36

> HISTORIQUE DES MODIFICATIONS

Première apparition
27/05/2025 08:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:04
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME