What is CVE-2025-2297?

CVE-2025-2297 is a high-severity vulnerability in Beyondtrust Privilege Management For Windows, classified under Privilege Chaining. CVSS score: 7.8/10. Published 2025-07-28.

How severe is CVE-2025-2297?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Beyondtrust Privilege Management For Windows

CVE-2025-2297

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit th…

EPSS: 0.001 (2.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Beyondtrust Privilege Management For Windows — versions 0
Beyondtrust Privilege_management_for_windows

Weakness classification (CWE)

CWE-268 — Privilege Chaining

References

13061848-ea10-403d-bd75-c83a022c2891 (Vendor Advisory)

Frequently asked questions

What is CVE-2025-2297?: CVE-2025-2297 is a high-severity vulnerability in Beyondtrust Privilege Management For Windows, classified under Privilege Chaining. CVSS score: 7.8/10. Published 2025-07-28.
How severe is CVE-2025-2297?: High severity. CVSS v3 base score is 7.8 out of 10.