Vulnerability in Rising Technosoft Cap Back Office Application
CVE-2025-29995
This vulnerability exists in the CAP back office application due to a weak password-reset mechanism implemented at API endpoints. An authenticated remote attacker with a valid login ID could exploit this vulnerability through vulnerable AP…
EPSS: 0.003 (25.6th percentile) — read the EPSS interpretation.
Affected products
- Rising Technosoft Cap Back Office Application — versions <2.0.4
Weakness classification (CWE)
Public proof-of-concept exploits
References
- vdisclose@cert-in.org.in (third-party-advisory)
Frequently asked questions
- What is CVE-2025-29995?
- CVE-2025-29995 is a vulnerability in Rising Technosoft Cap Back Office Application, classified under Weak Password Recovery Mechanism for Forgotten Password. Published 2025-03-13.
- Is CVE-2025-29995 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.