CVE-2025-54765

medium · 5.3

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to import the appliance configuration, allowing an attacker to control the configuration of the appliance, to include granting themselves administrative level permissions.

5.3

CVSS

10.2%

EPSS (exploit prob.)

96th

EPSS percentile

2025-07-29

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses

CWE-648

Affected products

Vendor	Product	Affected versions
xorux	xormon	<= 1.8.0

Check a specific version with /api/v1/cve/match.

References

https://korelogic.com/Resources/Advisories/KL-001-2025-013.txt
https://xormon.com/note190.php
http://seclists.org/fulldisclosure/2025/Jul/16

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-54765