Sensitive Information Exposure in Vimesoft Corporate Messaging Platform
CVE-2025-11025

5.3MEDIUM

What is CVE-2025-11025?

The Vimesoft Corporate Messaging Platform is susceptible to an information exposure vulnerability that allows for the retrieval of embedded sensitive data. This issue specifically affects versions ranging from V1.3.0 up to, but not including, V2.0.0. Organizations utilizing these versions could face risks associated with unauthorized access to sensitive transmitted information.

Affected Version(s)

Vimesoft Corporate Messaging Platform V1.3.0

References

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Berat AKŞİT
Sencer KILIÇ
Berat AKŞİT
.
CVE-2025-11025 : Sensitive Information Exposure in Vimesoft Corporate Messaging Platform