← volver
CVE-2025-12461

Unprotected access to parts of the application in Epsilon RH by Grupo Castilla

CVSS 6.9 MEDIUMEPSS 0.3%CWE-522
This vulnerability allows an attacker to access parts of the application that are not protected by any type of access control. The attacker could access this path ‘…/epsilonnet/License/About.aspx’ and obtain information on both the licence and the configuration of the product by knowing which modules are installed.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Grupo Castilla · Epsilon RH

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →