CVE-2025-63747

Modified Modified - Updated After Analysis

BaseFortify

Publication date: 2025-11-17

Last updated on: 2026-07-05

Assigner: MITRE

Description

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can gain administrative access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-17

Last Modified

2026-07-05

Generated

2026-07-06

AI Q&A

2025-11-17

EPSS Evaluated

2026-07-05

NVD

CVE-2025-63747

EUVD

EUVD-2025-197815

Affected Vendors & Products

Vendor	Product	Version / Range
testmanagement	qatraq	6.9.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-521	The product does not require that users should have strong passwords.

Attack-Flow Graph

Executive Summary

QaTraq 6.9.2 includes default administrative account credentials that are enabled by default. This means that anyone who can access the web application login page can use these credentials to immediately gain administrative access without needing to bypass any security measures.

Impact Analysis

This vulnerability allows an attacker to gain administrative access to the QaTraq application simply by reaching the login page, potentially leading to unauthorized control over the system, data exposure, or manipulation of application settings.

Mitigation Strategies

To mitigate this vulnerability, immediately change or disable the default administrative account credentials in QaTraq 6.9.2. Restrict access to the web application login page to trusted users or networks, and consider implementing additional authentication controls to prevent unauthorized administrative access.

Hi! I’m here to help you understand CVE-2025-63747. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70