CVE-2025-14376
Last modified
CVE-2025-14376 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been optional since the 1.36 release in 2024.. EPSS estimates a 0.13% chance of exploitation in the next 30 days.
Description
A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been optional since the 1.36 release in 2024.
Metrics
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-14376?
How severe is CVE-2025-14376?
How do I fix CVE-2025-14376?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-1437The Advanced iFrame plugin for WordPress is vulnerable to St…5.4
- CVE-2025-14370The Quote Comments plugin for WordPress is vulnerable to Mis…4.3
- CVE-2025-14371The Tag, Category, and Taxonomy Manager – AI Autotagger with…4.3
- CVE-2025-14372Use after free in Password Manager in Google Chrome prior to…6.1
- CVE-2025-14373Inappropriate implementation in Toolbar in Google Chrome on …4.3
- CVE-2025-14375The RSS Aggregator – RSS Import, News Feeds, Feed to Post, a…6.1
- CVE-2025-14377A security issue was discovered within the legacy Ansible pl…8.8
- CVE-2025-14378The Quick Testimonials plugin for WordPress is vulnerable to…4.4
- CVE-2025-14379The Testimonials Creator plugin for WordPress is vulnerable …4.4
- CVE-2025-14383The Booking Calendar plugin for WordPress is vulnerable to t…7.5
- CVE-2025-14384The All in One SEO – Powerful SEO Plugin to Boost SEO Rankin…4.3
- CVE-2025-14385The WP Recipe Maker plugin for WordPress is vulnerable to St…6.4
Are you affected by CVE-2025-14376?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST