CVE-2025-62586
BaseFortify
Publication date: 2025-10-16
Last updated on: 2025-10-29
Assigner: Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| opexustech | foiaxpress | From 11.1.0 (inc) to 11.13.2.0 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-306 | The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in OPEXUS FOIAXpress allows a remote, unauthenticated attacker to reset the administrator password, potentially gaining unauthorized administrative access to the system. It is fixed in FOIAXpress version 11.13.2.0.
How can this vulnerability impact me? :
An attacker exploiting this vulnerability can gain administrative control over the affected system without authentication, which can lead to unauthorized access, data compromise, and potential disruption of services.
What immediate steps should I take to mitigate this vulnerability?
Update FOIAXpress to version 11.13.2.0 or later, as this version contains the fix for the vulnerability allowing remote, unauthenticated attackers to reset the administrator password.