CVE-2025-1542
Description
Improper permission control vulnerability in the OXARI ServiceDesk application could allow an attacker using a guest access or an unprivileged account to gain additional administrative permissions in the application.This issue affects OXARI ServiceDesk in versions before 2.0.324.0.
Weakness Type (CWE)
References
Frequently Asked Questions
What is CVE-2025-1542? +
How do I check if I'm vulnerable to CVE-2025-1542? +
Related Vulnerabilities
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information.
In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) an unauthorised user can view configuration files by directly …
Lack of authentication in all versions of the fileserver component of Allegro AI’s ClearML platform allows a remote attacker to …
Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the …
Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an …
Direct request ('Forced Browsing') issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If a remote attacker sends a …