CVE-2025-29925

XWiki Platform REST API vulnerability CVE-2025-29925: the /rest/wikis/[wikiName]/pages endpoint could disclose information about protected/private pages to unauthenticated users before fixes. The issue occurs because the endpoint listed pages even when the user had no view rights, notably when th...

The vulnerability of the Supervisor component of the Cisco Integrated Management Controller (IMC), as well as the physical infrastructure management tools and Cisco UCS Director and Cisco UCS Director Express for Big Data virtual environments, is related to the existence of a standard account with an undocumented password and incorrect access rights settings for this account. This allows an attacker to gain access to the command-line interface of the target system with administrator privileges.

The vulnerability of the Cisco Integrated Management Controller IMC Supervisor, which manages physical infrastructure and virtual environments such as Cisco UCS Director and Cisco UCS Director Express for Big Data, stems from the presence of a standard account with an undocumented password and...