CVE-2025-61075

n/a / n/a PUBLISHED

Description (CNA)

Multiple Incorrect Access Control vulnerabilities in adata Software GmbH Mitarbeiterportal 2.15.2.0 allow remote authenticated, low-privileged users to carry out administrative functions and manipulate data of other users via unauthorized API calls.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.adata.de/mitarbeiter-portal/
https://no-sec.net/posts/cve-2025-61075/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.