What is CVE-2025-11151?

CVE-2025-11151 is a high-severity vulnerability in Beyaz Bilgisayar Software Design Industry And Trade Ltd. Co. Cityplus, classified under Information Disclosure. CVSS score: 8.2/10. Published 2025-10-21.

How severe is CVE-2025-11151?

High severity. CVSS v3 base score is 8.2 out of 10.

Information disclosure in Beyaz Bilgisayar Software Design Industry And Trade Ltd. Co. Cityplus

CVE-2025-11151

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages. This issue affects CityPLus: before V24.29500.1.0.

Vulnerability class: Information Disclosure

EPSS: 0.003 (17.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.

Affected products

Beyaz Bilgisayar Software Design Industry And Trade Ltd. Co. Cityplus — versions 0

Weakness classification (CWE)

References

iletisim@usom.gov.tr (government-resource, broken-link)
iletisim@usom.gov.tr (government-resource)

Frequently asked questions

What is CVE-2025-11151?: CVE-2025-11151 is a high-severity vulnerability in Beyaz Bilgisayar Software Design Industry And Trade Ltd. Co. Cityplus, classified under Information Disclosure. CVSS score: 8.2/10. Published 2025-10-21.
How severe is CVE-2025-11151?: High severity. CVSS v3 base score is 8.2 out of 10.