CVE-2025-52166 - Incorrect access control in Software GmbH Agorum core open v11.9.2 & v11.10.1 allows authenticated attackers to escalate privileges to Administrator and access sensitive components and information

Back Back to CVE browser

MEDIUM

Incorrect access control in Software GmbH Agorum core open v11.9.2 & v11.10.1 allows authenticated attackers to escalate privileges to Administrator and access sensitive components and information

Published Jul 18, 2025

6.5

MEDIUM

CVSS 3.1

EPSS 0.19%

Description

Incorrect access control in Software GmbH Agorum core open v11.9.2 & v11.10.1 allows authenticated attackers to escalate privileges to Administrator and access sensitive components and information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (1)

https://herolab.usd.de/usd-2025-0028/

Link	Providers	Tags
https://herolab.usd.de/usd-2025-0028/

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 18, 2025

Updated Jul 5, 2026

Reserved Jun 16, 2025

Link CVE-2025-52166

CISA Vulnrichment

Updated Jul 18, 2025

NVD

Status Deferred

Modified Jul 5, 2026

Link CVE-2025-52166

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-52166