CVE-2025-15509

Summary

The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage.

Affected Software

Weaknesses

• CWE-306: CWE-306 Missing Authentication for Critical Function

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.vivo.com/en/support/security-advisory-detail?id=20

• ←Previous
• Next→