2025 CVE Vulnerabilities

45,347 CVEs published in 2025.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2025-42962MEDIUM6.1SAP Business Warehouse (Business Explorer Web) allows an attacker to create a malicious link. If an authenticated user c...
CVE-2025-42961MEDIUM4.9Due to a missing authorization check in SAP NetWeaver Application server for ABAP, an authenticated user with high privi...
CVE-2025-42960MEDIUM4.3SAP Business Warehouse and SAP BW/4HANA BEx Tools allow an authenticated attacker to gain higher access levels than inte...
CVE-2025-31326MEDIUM4.1SAP�BusinessObjects Business�Intelligence Platform (Web Intelligence) is vulnerable to HTML Injection, allowing an attac...
CVE-2025-7153MEDIUM5.4A vulnerability classified as problematic was found in CodeAstro Simple Hospital Management System 1.0. Affected by this...
CVE-2025-7148MEDIUM5.4A vulnerability was found in CodeAstro Simple Hospital Management System 1.0 and classified as problematic. Affected by ...
CVE-2025-7144MEDIUM4.8A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as problematic. This vu...
CVE-2025-7143MEDIUM5.4A vulnerability, which was classified as problematic, was found in SourceCodester Best Salon Management System 1.0. This...
CVE-2025-7142MEDIUM5.4A vulnerability, which was classified as problematic, has been found in SourceCodester Best Salon Management System 1.0....
CVE-2025-53543MEDIUM4.2Kestra is an event-driven orchestration platform. The error message in execution "Overview" tab is vulnerable to stored ...
CVE-2025-53496MEDIUM5.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F...
CVE-2025-7141MEDIUM5.4A vulnerability classified as problematic was found in SourceCodester Best Salon Management System 1.0. Affected by this...
CVE-2025-7140MEDIUM5.4A vulnerability classified as problematic has been found in SourceCodester Best Salon Management System 1.0. Affected is...
CVE-2025-6044MEDIUM6.1An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the gara...
CVE-2025-53498MEDIUM5.3Insufficient Logging vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Data Leakage Attacks...
CVE-2025-53488MEDIUM6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F...
CVE-2025-53478MEDIUM5.4The CheckUser extension’s Special:Investigate interface is vulnerable to reflected XSS due to improper escaping of certa...
CVE-2025-7139MEDIUM5.4A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as problematic. This iss...
CVE-2025-20325MEDIUM5.3In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.1...
CVE-2025-20324MEDIUM5.4In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.7, and 9.1.10 and Splunk Cloud Platform versions below 9.3.2411.10...
CVE-2025-20323MEDIUM4.3In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, a low-privileged user that does not hold the "admin...
CVE-2025-20322MEDIUM4.3In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.1...
CVE-2025-20321MEDIUM4.3In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.10...
CVE-2025-20319MEDIUM6.8In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, a user who holds a role that contains the high-priv...
CVE-2025-20300MEDIUM4.3In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.6, and 9.1.9 and Splunk Cloud Platform versions below 9.3.2411.103...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now