Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/12/18 12:36 a.m.9 views

CVE-2025-65185

There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious users to enumerate users by entering an OTP code and new password then reviewing application responses...

2.8CVSS7AI score0.00134EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/17 6:31 p.m.3 views

EUVD-2025-203899

There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious users to enumerate users by entering an OTP code and new password then reviewing application responses...

2.8CVSS6.4AI score0.00134EPSS
Exploits1References4
NVD
NVD
added 2025/12/17 5:15 p.m.4 views

CVE-2025-65185

There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious users to enumerate users by entering an OTP code and new password then reviewing application responses...

2.8CVSS0.00134EPSS
Exploits1References2
OSV
OSV
added 2025/12/17 5:15 p.m.2 views

CVE-2025-65185

There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious users to enumerate users by entering an OTP code and new password then reviewing application responses...

2.8CVSS5.8AI score0.00134EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/12/17 12:0 a.m.3 views

CVE-2025-65185

There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious users to enumerate users by entering an OTP code and new password then reviewing application responses...

6.5AI score0.00134EPSS
Exploits1References2
CVE
CVE
added 2025/12/17 12:0 a.m.8 views

CVE-2025-65185

Summary: CVE-2025-65185 affects Entrinsik Informer v5.10.1, enabling username enumeration during local login by supplying an OTP code and a new password and observing application responses. The vulnerability's impact is described as low (CVSS v3.1: 2.8, LOCAL access, user interaction required). O...

2.8CVSS6.5AI score0.00134EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/17 12:0 a.m.4 views

PT-2025-51839

Name of the Vulnerable Software and Affected Versions Entrinsik Informer version 5.10.1 Description A malicious user can enumerate usernames through local user login. This is achieved by entering an OTP code and a new password, then analyzing the application's responses. Recommendations At the...

2.8CVSS6.4AI score0.00134EPSS
Exploits1References7
Cvelist
Cvelist
added 2025/12/17 12:0 a.m.27 views

CVE-2025-65185

There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious users to enumerate users by entering an OTP code and new password then reviewing application responses...

0.00134EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.3 views

Entrinsik Informer 安全漏洞

Entrinsik Informer is a business intelligence and data analytics platform from US-based Entrinsik. A security vulnerability exists in Entrinsik Informer version 5.10.1, which stems from the presence of username enumeration at local user login, which could lead to a malicious user enumerating user...

2.8CVSS6.4AI score0.00134EPSS
Exploits1References4
Rows per page
Query Builder