Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-22931

An insecure direct object reference (IDOR) in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.0%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2025-22931
  • Os4ed » Opensis » Version: 7.0
    cpe:2.3:a:os4ed:opensis:7.0
  • Os4ed » Opensis » Version: 7.1
    cpe:2.3:a:os4ed:opensis:7.1
  • Os4ed » Opensis » Version: 7.2
    cpe:2.3:a:os4ed:opensis:7.2
  • Os4ed » Opensis » Version: 7.3
    cpe:2.3:a:os4ed:opensis:7.3
  • Os4ed » Opensis » Version: 7.4
    cpe:2.3:a:os4ed:opensis:7.4
  • Os4ed » Opensis » Version: 7.5
    cpe:2.3:a:os4ed:opensis:7.5
  • Os4ed » Opensis » Version: 7.6
    cpe:2.3:a:os4ed:opensis:7.6
  • Os4ed » Opensis » Version: 8.0
    cpe:2.3:a:os4ed:opensis:8.0
  • Os4ed » Opensis » Version: 9.0
    cpe:2.3:a:os4ed:opensis:9.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved