What is CVE-2025-29994?

CVE-2025-29994 is a vulnerability in Rising Technosoft Cap Back Office Application, classified under Weak Authentication. Published 2025-03-13.

Is CVE-2025-29994 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Rising Technosoft Cap Back Office Application

CVE-2025-29994

This vulnerability exists in the CAP back office application due to improper authentication check at the API endpoint. An unauthenticated remote attacker with a valid login ID could exploit this vulnerability by manipulating API input para…

EPSS: 0.004 (30.7th percentile) — read the EPSS interpretation.

Affected products

Rising Technosoft Cap Back Office Application — versions <2.0.4

Weakness classification (CWE)

CWE-1390 — Weak Authentication

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

vdisclose@cert-in.org.in (third-party-advisory)

Frequently asked questions

What is CVE-2025-29994?: CVE-2025-29994 is a vulnerability in Rising Technosoft Cap Back Office Application, classified under Weak Authentication. Published 2025-03-13.
Is CVE-2025-29994 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.