CVE-2025-11025
Information Disclosure in Vimeosoft Information Technologies' Vimesoft Corporate Messaging Platform
- State
- Published
- Severity
- 5.3 Medium
- Published
- Sep 26, 2025
- Updated
- Jun 4, 2026
- Reserved
- Sep 26, 2025
Description
Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform allows Retrieve Embedded Sensitive Data.
This issue affects Vimesoft Corporate Messaging Platform: from V1.3.0 before V2.0.0.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N | TR-CERT |
Weaknesses
- CWE-201 Insertion of Sensitive Information Into Sent Data
Affected Products
| Product | Versions |
|---|---|
Vimesoft Corporate Messaging PlatformVimesoft Information Technologies and Software Inc. |
|
References
- https://www.usom.gov.tr/bildirim/tr-25-0300government-resourcebroken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0300government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.