CVE-2025-2395

critical · 9.8

The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to use a particular API and alter cookies to log in as an administrator.

9.8

CVSS

0.6%

EPSS (exploit prob.)

46th

EPSS percentile

2025-03-17

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-565

Affected products

Vendor	Product	Affected versions
edetw	u-office_force	< 28.0

Check a specific version with /api/v1/cve/match.

References

https://www.twcert.org.tw/en/cp-139-10012-d5bbc-2.html
https://www.twcert.org.tw/tw/cp-132-10011-3de72-1.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-2395