TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal

TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII including partner and contact names. id: CVE-2025-27225 info: name: TRUfusion Enterprise = 7.10.4.0 - Admin Conta...

CVE-2025-27225

creationtimestamp| type| source ---|---|--- 2025-09-30 15:43:13+00:00| seen| https://bsky.app/profile/rcesecurity.com/post/3m22ui2mis22w 2025-10-01 18:53:17+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-27225.yaml 2025-10-02 21:02:26+00:0...