9.8

CVE-2025-60534

EPSS 0.11%
Veröffentlicht 06.01.2026 00:00:00
Zuletzt bearbeitet 29.01.2026 01:24:16
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Blue Access Cobalt v02.000.195 suffers from an authentication bypass vulnerability, which allows an attacker to selectively proxy requests in order to operate functionality on the web application without the need to authenticate with legitimate credentials.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Blueaccesstech ≫ Cobalt X1 Version02.000.195

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.11%	0.304

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://blue.com

Broken Link

https://github.com/PilotPatrickk/Published-CVEs/blob/main/CVE-2025-60534.md

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-60534

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-60534

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-60534

EUVD