CVE-2025-36759
Sensitive Information Disclosure in SolaX Cloud
- State
- Published
- Severity
- 8.7 High
- Published
- Sep 10, 2025
- Updated
- Sep 10, 2025
- Reserved
- Apr 15, 2025
Description
Through the provision of user names, SolaX Cloud will suggest (similar) user accounts and thereby leak sensitive information such as user email addresses and phone numbers.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | DIVD |
Weaknesses
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Affected Products
| Product | Versions |
|---|---|
SolaX CloudSolaX Power |
|
References
- https://csirt.divd.nl/CVE-2025-36759third-party-advisory
- https://csirt.divd.nl/DIVD-2025-00015third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.