Vulnerability Details CVE-2025-9254
WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to log into the system as arbitrary users by exploiting a specific functionality.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.3%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2025-9254
-
cpe:2.3:a:uniong:webitr:-
-
cpe:2.3:a:uniong:webitr:2_1_0_27
-
cpe:2.3:a:uniong:webitr:2_1_0_28