What is CVE-2025-11025?

CVE-2025-11025 is a medium-severity vulnerability in Vimesoft Information Technologies And Software Inc. Corporate Messaging Platform, classified under Insertion of Sensitive Information into Sent Data. CVSS score: 5.3/10. Published 2025-09-26.

How severe is CVE-2025-11025?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Vimesoft Information Technologies And Software Inc. Corporate Messaging Platform

CVE-2025-11025

Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform allows Retrieve Embedded Sensitive Data. This issue affects Vimesoft Corporate Messaging Platform: from V1.3.0 before V2.0.0.

EPSS: 0.003 (18.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N.

Affected products

Vimesoft Information Technologies And Software Inc. Corporate Messaging Platform — versions V1.3.0

Weakness classification (CWE)

CWE-201 — Insertion of Sensitive Information into Sent Data

References

iletisim@usom.gov.tr (government-resource, broken-link)
iletisim@usom.gov.tr (government-resource)

Frequently asked questions

What is CVE-2025-11025?: CVE-2025-11025 is a medium-severity vulnerability in Vimesoft Information Technologies And Software Inc. Corporate Messaging Platform, classified under Insertion of Sensitive Information into Sent Data. CVSS score: 5.3/10. Published 2025-09-26.
How severe is CVE-2025-11025?: Medium severity. CVSS v3 base score is 5.3 out of 10.