7.1

CVE-2025-1102

EPSS 0.14%
Veröffentlicht 12.02.2025 14:15:31
Zuletzt bearbeitet 24.10.2025 14:58:28
Quelle prodsec@nozominetworks.com
CVE-Watchlists
Login
Unerledigt
Login

A CWE-346 "Origin Validation Error" in the CORS configuration in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to affect the device confidentiality, integrity, or availability via crafted URLs or HTTP requests.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Q-free ≫ Maxtime Version <= 2.11.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.14%	0.035

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.1	1.8	5.2	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
prodsec@nozominetworks.com	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-346 Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-1102

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-1102

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-1102

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-1102

EUVD