CVE-2025-43000 – Apache Struts Information Disclosure Vulnerability

The following table lists the changes that have been made to the
CVE-2025-43000 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    May. 13, 2025

    Action Type Old Value New Value
    Added Description Under certain conditions Promotion Management Wizard (PMW) allows an attacker to access information which would otherwise be restricted.This has High impact on Confidentiality with Low impact on Integrity and Availability of the application.
    Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
    Added CWE CWE-862
    Added Reference https://me.sap.com/notes/3586013
    Added Reference https://url.sap/sapsecuritypatchday
Share the Post:

Related Posts