CVE-2025-0001

Published Feb 17, 2025

Last updated 10 months ago

Overview

Description
Abacus ERP is versions older than 2024.210.16036, 2023.205.15833, 2022.105.15542 are affected by an authenticated arbitrary file read vulnerability.
Source
vulnerability@ncsc.ch
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
6.5
Impact score
3.6
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity
MEDIUM

Weaknesses

vulnerability@ncsc.ch
CWE-36

Social media

Hype score
Not currently trending

References

Sources include official advisories and independent security research.