CVE-2025-11025

Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform allows Retrieve Embedded Sensitive Data. This issue affects Vimesoft Corporate Messaging Platform: from V1.3.0 before V2.0.0.

Score

CVSS 3.1 5.3 Medium

Status

Deferred - iletisim@usom.gov.tr

Published

2025-09-26

Last modified

2026-10-09

Weaknesses

CWE-201

Affected products

• Vimesoft Corporate Messaging Platform (Vimesoft Information Technologies And Software Inc.)

References

• https://www.usom.gov.tr/bildirim/tr-25-0300
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0300