What’s Vulnerable › Vulnerabilities

CVE-2025-69752

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-12 · updated 2026-07-05
• Weakness: CWE-639

Description

An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL.

References

• https://github.com/brtsec/public-advisories/tree/main/advisories/CVE-2025-69752
• https://github.com/brtsec/public-advisories/tree/main/advisories/CVE-2025-69752

Get alerted when CVE-2025-69752 or the next vulnerability affects your stack