{"id":"CVE-2025-15065","aliases":["EUVD-2025-205537","GHSA-h867-r9h7-gw3j"],"status":"published","title":"Data Exposure in Kings Information \u0026 Network KESS Enterprise","description":"Exposure of Sensitive Information to an Unauthorized Actor, Missing Encryption of Sensitive Data, Files or Directories Accessible to External Parties vulnerability in Kings Information \u0026 Network Co. KESS Enterprise on Windows allows Privilege Escalation, Modify Existing Service, Modify Shared File.This issue affects KESS Enterprise: before *.25.9.19.exe","severity":{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00051,"percentile":0.00001,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-311","CWE-552"],"published":"2025-12-29T00:09:27Z","modified":"2026-10-07T12:10:00Z","products":[{"vendor":"kings information \u0026 network co.","product":"kess enterprise"}],"references":[{"url":"https://www.kings.co.kr/solution/01/KESS.jsp?O=10.64\u0026B=Chrome"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15065"},{"url":"https://github.com/advisories/GHSA-h867-r9h7-gw3j"}],"sources":{"cve":[{"id":"CVE-2025-15065","title":"Data Exposure in Kings Information \u0026 Network KESS Enterprise","description":"Exposure of Sensitive Information to an Unauthorized Actor, Missing Encryption of Sensitive Data, Files or Directories Accessible to External Parties vulnerability in Kings Information \u0026 Network Co. KESS Enterprise on Windows allows Privilege Escalation, Modify Existing Service, Modify Shared File.This issue affects KESS Enterprise: before *.25.9.19.exe","status":"published","published":"2025-12-29T00:09:27.009Z","modified":"2025-12-31T04:45:49.039Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-200","CWE-311","CWE-552"],"updated_at":"2026-11-02T14:32:37.680845Z"}],"euvd":[{"id":"EUVD-2025-205537","description":"Exposure of Sensitive Information to an Unauthorized Actor, Missing Encryption of Sensitive Data, Files or Directories Accessible to External Parties vulnerability in Kings Information \u0026 Network Co. KESS Enterprise on Windows allows Privilege Escalation, Modify Existing Service, Modify Shared File.This issue affects KESS Enterprise: before *.25.9.19.exe","status":"published","published":"2025-12-29T00:09:27Z","modified":"2025-12-31T04:45:49Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N","level":"high"}],"updated_at":"2026-11-02T19:48:59.455836Z"}],"ghsa":[{"id":"GHSA-h867-r9h7-gw3j","title":"Exposure of Sensitive Information to an Unauthorized Actor, Missing Encryption of Sensitive Data,...","description":"Exposure of Sensitive Information to an Unauthorized Actor, Missing Encryption of Sensitive Data, Files or Directories Accessible to External Parties vulnerability in Kings Information \u0026 Network Co. KESS Enterprise on Windows allows Privilege Escalation, Modify Existing Service, Modify Shared File.This issue affects KESS Enterprise: before *.25.9.19.Exe.","status":"published","published":"2025-12-29T03:30:24Z","modified":"2025-12-29T03:30:25Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:05:22.620437Z"}],"nvd":[{"id":"CVE-2025-15065","description":"Exposure of Sensitive Information to an Unauthorized Actor, Missing Encryption of Sensitive Data, Files or Directories Accessible to External Parties vulnerability in Kings Information \u0026 Network Co. KESS Enterprise on Windows allows Privilege Escalation, Modify Existing Service, Modify Shared File.This issue affects KESS Enterprise: before *.25.9.19.exe","status":"published","published":"2025-12-29T01:15:52.68Z","modified":"2026-10-07T12:10:00.17Z","cvss":[{"version":"4.0","score":8.6,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-200","CWE-311","CWE-552"],"updated_at":"2026-11-02T14:11:53.683969Z"}]}}