CVE-2025-15065
Last modified
CVE-2025-15065 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. Exposure of Sensitive Information to an Unauthorized Actor, Missing Encryption of Sensitive Data, Files or Directories Accessible to External Parties vulnerability in Kings Information & Network Co. KESS Enterprise on Windows allows Privilege Escalation, Modify Existing Service, Modify Shared File.This issue affects KESS Enterprise: before *.25.9.19.exe. EPSS estimates a 0.05% chance of exploitation in the next 30 days.
Description
Exposure of Sensitive Information to an Unauthorized Actor, Missing Encryption of Sensitive Data, Files or Directories Accessible to External Parties vulnerability in Kings Information & Network Co. KESS Enterprise on Windows allows Privilege Escalation, Modify Existing Service, Modify Shared File.This issue affects KESS Enterprise: before *.25.9.19.exe
Metrics
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-15065?
How severe is CVE-2025-15065?
How do I fix CVE-2025-15065?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-1506The Wp Social Login and Register Social Counter plugin for W…4.3
- CVE-2025-15060claude-hovercraft executeClaudeCode Command Injection Remote…9.8
- CVE-2025-15061Framelink Figma MCP Server fetchWithRetry Command Injection …9.8
- CVE-2025-15062Trimble SketchUp SKP File Parsing Use-After-Free Remote Code…7.8
- CVE-2025-15063Ollama MCP Server execAsync Command Injection Remote Code Ex…9.8
- CVE-2025-15064The Ultimate Member – User Profile, Registration, Login, Mem…6.4
- CVE-2025-15066Improper Limitation of a Pathname to a Restricted Directory …6.9
- CVE-2025-15067Unrestricted Upload of File with Dangerous Type vulnerabilit…8.5
- CVE-2025-15068Missing Authorization vulnerability in Gmission Web Fax allo…9.8
- CVE-2025-15069Improper Authentication vulnerability in Gmission Web Fax al…9.8
- CVE-2025-1507The ShareThis Dashboard for Google Analytics plugin for Word…5.3
- CVE-2025-15070Exposure of Sensitive Information to an Unauthorized Actor, …6.5
Are you affected by CVE-2025-15065?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST