What’s Vulnerable › Vulnerabilities
CVE-2025-12461: Unprotected access to parts of the application in Epsilon RH by Grupo Castilla
- Severity: medium (CVSS 6.9 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-10-29 · updated 2026-10-08
- Weakness: CWE-522
Description
This vulnerability allows an attacker to access parts of the application that are not protected by any type of access control. The attacker could access this path ‘…/epsilonnet/License/About.aspx’ and obtain information on both the licence and the configuration of the product by knowing which modules are installed.
Affected products
- Grupo Castilla Epsilon RH: 3.03.36.0185
References
Get alerted when CVE-2025-12461 or the next vulnerability affects your stack