CVE-2025-64064

概要

参考情報

• n3k7ar91/Vulnerabilites · Third Party Advisory
• primakon.com/rjesenja/primakon-pcm · Product

project contract management のその他の脆弱性

• CVE-2025-64067中 5.3Primakon Pi Portal 1.0.18 API endpoints responsible for retrieving object-specific or filtered data (e.g., user profiles, project records) f…
• CVE-2025-64065高 8.8The Primakon Pi Portal 1.0.18 API /api/V2/pp_udfv_admin endpoint, fails to perform necessary server-side validation. The administrative Logi…
• CVE-2025-64063緊急 9.8Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard u…
• CVE-2025-64066高 8.6Primakon Pi Portal 1.0.18 REST /api/v2/user/register endpoint suffers from a Broken Access Control vulnerability. The endpoint fails to impl…
• CVE-2025-64062高 8.8The Primakon Pi Portal 1.0.18 /api/V2/pp_users?email endpoint is used for user data filtering but lacks proper server-side validation agains…