CVE-2025-0352 - Rapid Response Monitoring My Security Account App Authorization Bypass Through User-Controlled Key

Back Back to CVE browser

HIGH

Rapid Response Monitoring My Security Account App Authorization Bypass Through User-Controlled Key

Published Feb 20, 2025

8.7

HIGH

CVSS 4.0

EPSS 0.36%

Description

Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users.

Affected products

Vendor Rapid Response Monitoring Product My Security Account App API Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <7/29/24

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Rapid Response Monitoring

My Security Account App API

unaffected

Version	Status	Constraints
0	affected	<7/29/24

Remediation

Vendor solution

Rapid Response Monitoring reports that this issue was patched on their end and no action is required by users. For further information, contact https://www.rrms.com/contact-us/ Rapid Response Monitoring.

Metrics

0.36% 0.00358

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00358

Score over time

2025-2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (4 key points)

Flat stretches are collapsed. Showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.36% (0.00358)	27.25th	v5 (v2026.06.15)
Jun 15, 2026	0.33% (0.00330)	24.57th	v5 (v2026.06.15)
Mar 17, 2025	0.04% (0.00042)	9.80th	v4 (v2025.03.14)
Feb 21, 2025	0.04% (0.00043)	11.72th	v3 (v2023.03.01)