CVE-2025-11843

🗓️ 31 Oct 2025 09:43:08Reported by Canon_EMEAType

Therefore Online and On-Premises have an account impersonation vulnerability enabling access to stored documents via the API.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-11843	31 Oct 202513:22	–	circl
CNNVD	Therefore Online和Therefore On-Premises 安全漏洞	31 Oct 202500:00	–	cnnvd
Cvelist	CVE-2025-11843 Therefore™ Online and Therefore™ On-Premises contains an account impersonation issue, which could potentially allow the attacker to access all the stored data	31 Oct 202509:43	–	cvelist
EUVD	EUVD-2025-37320	31 Oct 202509:43	–	euvd
NVD	CVE-2025-11843	31 Oct 202510:15	–	nvd
Positive Technologies	PT-2025-44596	31 Oct 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-11843	1 Nov 202512:04	–	redhatcve
Vulnrichment	CVE-2025-11843 Therefore™ Online and Therefore™ On-Premises contains an account impersonation issue, which could potentially allow the attacker to access all the stored data	31 Oct 202509:43	–	vulnrichment

CNA

Node

therefore_corporation_gmbh therefore_online_and_therefore_on-premisesRange0–2025windows

[
  {
    "defaultStatus": "affected",
    "platforms": [
      "Windows"
    ],
    "product": "Therefore Online and Therefore On-Premises",
    "vendor": "Therefore Corporation GmbH",
    "versions": [
      {
        "lessThanOrEqual": "2025",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
canon-europe	www.canon-europe.com/psirt/advisory-information/

17 Jun 2026 08:31Current

6.3Medium risk

Vulners AI Score6.3

CVSS 48.8

EPSS0.0031

SSVC

CWE-290