Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
added 2025/10/22 12:12 p.m.15 views

CVE-2025-10640

An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks to bypass the login prompt in the WorkExaminer Professional console to gain administrative access to the WorkExaminer server and therefore all sensitive...

9.8CVSS7.1AI score0.00901EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/22 12:12 p.m.23 views

CVE-2025-10641

All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit the...

7.1CVSS6.7AI score0.00315EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/21 12:31 p.m.13 views

EUVD-2025-35164

All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit the...

6.2AI score0.00315EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/21 12:31 p.m.12 views

EUVD-2025-35159

An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks to bypass the login prompt in the WorkExaminer Professional console to gain administrative access to the WorkExaminer server and therefore all sensitive...

6.6AI score0.00901EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/21 12:15 p.m.14 views

CVE-2025-10640

An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks to bypass the login prompt in the WorkExaminer Professional console to gain administrative access to the WorkExaminer server and therefore all sensitive...

9.8CVSS0.00901EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/21 12:15 p.m.13 views

CVE-2025-10641

All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit the...

7.1CVSS0.00315EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/21 11:48 a.m.6 views

CVE-2025-10641 Unencrypted cleartext communication in EfficientLab WorkExaminer Professional

All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit the...

6.4AI score0.00315EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/21 11:48 a.m.26 views

CVE-2025-10641 Unencrypted cleartext communication in EfficientLab WorkExaminer Professional

All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit the...

0.00315EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/21 11:48 a.m.29 views

CVE-2025-10641

All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit the...

6.4AI score0.00315EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/21 11:43 a.m.10 views

CVE-2025-10640 Missing Server-Side Authentication Checks in EfficientLab WorkExaminer Professional

An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks to bypass the login prompt in the WorkExaminer Professional console to gain administrative access to the WorkExaminer server and therefore all sensitive...

6.7AI score0.00901EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/21 11:43 a.m.27 views

CVE-2025-10640 Missing Server-Side Authentication Checks in EfficientLab WorkExaminer Professional

An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks to bypass the login prompt in the WorkExaminer Professional console to gain administrative access to the WorkExaminer server and therefore all sensitive...

0.00901EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/21 11:43 a.m.38 views

CVE-2025-10640

The WorkExaminer Professional employee monitoring software is vulnerable to a security flaw due to missing server-side authentication checks . An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit this by bypassing the login prompt in the Professional co...

6.7AI score0.00901EPSS
SaveExploits0References2
Rows per page
Query Builder