{"id":"CVE-2025-11145","aliases":["EUVD-2025-35850","GHSA-vh7x-8rfm-rpf4"],"status":"published","title":"User Enumeration in CBK Soft's enVision","description":"Observable Discrepancy, Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc. EnVision allows Account Footprinting.\n\nThis issue affects enVision: before 250566.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00343,"percentile":0.2816,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-203","CWE-359"],"published":"2025-10-24T14:25:37Z","modified":"2026-10-08T11:10:00Z","products":[{"vendor":"cbk soft software hardware electronic computer systems industry and trade inc.","product":"envision"}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-25-0361","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0361","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11145"},{"url":"https://github.com/advisories/GHSA-vh7x-8rfm-rpf4"}],"sources":{"cve":[{"id":"CVE-2025-11145","title":"User Enumeration in CBK Soft's enVision","description":"Observable Discrepancy, Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc. EnVision allows Account Footprinting.\n\nThis issue affects enVision: before 250566.","status":"published","published":"2025-10-24T14:25:37.498Z","modified":"2026-06-04T19:44:41.463Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-203","CWE-200","CWE-359"],"updated_at":"2026-11-02T14:32:51.199669Z"}],"euvd":[{"id":"EUVD-2025-35850","description":"Observable Discrepancy, Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc. EnVision allows Account Footprinting.\n\nThis issue affects enVision: before 250566.","status":"published","published":"2025-10-24T14:25:37Z","modified":"2026-06-04T19:44:41Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T18:20:52.744481Z"}],"ghsa":[{"id":"GHSA-vh7x-8rfm-rpf4","title":"Observable Discrepancy, Exposure of Sensitive Information to an Unauthorized Actor, Exposure of...","description":"Observable Discrepancy, Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc. EnVision allows Account Footprinting.This issue affects enVision: before 250566.","status":"published","published":"2025-10-24T15:31:26Z","modified":"2026-06-04T21:32:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:08:33.048787Z"}],"nvd":[{"id":"CVE-2025-11145","description":"Observable Discrepancy, Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc. EnVision allows Account Footprinting.\n\nThis issue affects enVision: before 250566.","status":"published","published":"2025-10-24T15:15:37.783Z","modified":"2026-10-08T11:10:00.25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-200","CWE-203","CWE-359"],"updated_at":"2026-11-02T14:11:39.579859Z"}]}}