CVE-2025-10161

Katalog CVE

CVSS 7.3 · High EPSS 0,29%

Kerentanan Improper Restriction of Excessive Authentication Attempts. Skor CVSS 3.1 7.3 (High) menurut usom.gov.tr.

Deskripsi (NVD)

Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass. This issue affects Perfektive: before Version: 12574 Build: 2701.

Rincian

Terbit di NVD

11 November 2025

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

7.3 (High), sumber usom.gov.tr
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-307: Improper Restriction of Excessive Authentication Attempts
CWE-602: Client-Side Enforcement of Server-Side Security
CWE-807: Reliance on Untrusted Inputs in a Security Decision

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 20,2% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0387
• https://www.usom.gov.tr/bildirim/tr-25-0387