Base Score

MEDIUM6.4

CVE-2025-8532

Authorization Bypass Through User-Controlled Key, Improper Authorization vulnerability in Bimser Solution Software Trade Inc. EBA Document and Workflow Management System allows Forceful Browsing.This issue affects eBA Document and Workflow Management System: from 6.7.164 before 6.7.166.

VectorLOCAL

Published Byiletisim@usom.gov.tr

Published DateSep 19, 2025, 15:15

Weakness Type (CWE):CWE-285

CVSS Metrics

Base Score

6.4

Vector String

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

HIGH

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

CHANGED

Confidentiality (C)

LOW

Integrity (I)

HIGH

Availability (A)

NONE

References

https://www.usom.gov.tr/bildirim/tr-25-0280

Base Score

MEDIUM6.4

Weakness Type (CWE):CWE-285

CVSS Metrics

Base Score

6.4

Vector String

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

HIGH

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

CHANGED

Confidentiality (C)

LOW

Integrity (I)

HIGH

Availability (A)

NONE