CVE-2025-1542

Improper permission controlvulnerability in the OXARIServiceDeskapplication could allow an attackerusing a guest access or an unprivileged account to gain additional administrative permissions in the application.This issue affects OXARIServiceDesk in versions before 2.0.324.0.
Forced Browsing
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
UNKNOWN
---
CERT-PLCNA
---
---
CISA-ADPADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 20%
Common Weakness Enumeration
References
https://cert.pl/en/posts/2025/03/CVE-2025-1542/
https://www.oxari.com/en/product/oxari-servicedesk