What’s Vulnerable › Vulnerabilities

CVE-2025-11025: Information Disclosure in Vimeosoft Information Technologies' Vimesoft Corporate Messaging Platform

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-26 · updated 2026-10-09
• Weakness: CWE-201

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform allows Retrieve Embedded Sensitive Data. This issue affects Vimesoft Corporate Messaging Platform: from V1.3.0 before V2.0.0.

Affected products

• Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform: from V1.3.0 before V2.0.0 — fixed in V2.0.0

How to fix

Upgrade to a fixed version: Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform V2.0.0. Check the vendor advisory for mitigations.

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0300
• https://www.usom.gov.tr/bildirim/tr-25-0300

Get alerted when CVE-2025-11025 or the next vulnerability affects your stack