CVE-2025-15405

← CVEs

MED 4.3

Published

2026-01-01

Last Modified

2026-01-13

Affected Apps

Affected Devices

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely.

Affected Applications in Environment 16

1 device

1 device

1 device

1 device

php v2:8.4+101~+ubuntu24.04.1+deb.sury.org+1

8 devices

php v2:8.4+100~+ubuntu24.04.1+deb.sury.org+1

1 device

php v5.4.16-48.el7

1 device

php v2:7.4+75

3 devices

php v2:8.4+101~+ubuntu22.04.1+deb.sury.org+1

1 device

php v2:8.2+93

1 device

php v1:7.0+35ubuntu6.1

1 device

php v2:8.4+96+ubuntu20.04.1+deb.sury.org+1

1 device

php v2:8.4+100~+ubuntu22.04.1+deb.sury.org+1

1 device

php v2:8.1+92ubuntu1

1 device

php v2:8.3+93ubuntu2

5 devices

php v1:7.2+60ubuntu1

1 device

Affected Devices 29

DPCPD-9XY54D4 Windows DPDNNR-L92359R7 Windows KRAID Windows LUTZLAB178544 Windows aggietower Linux ah-ots Linux cceredcapweb Linux guru.cluster Linux kena-utility Linux my1 Linux mysql02 Linux privatebin Linux rcbd Linux rcdb-dev Linux redcapweb Linux sys-serv-l-301-data Linux web04a Linux web06 Linux web08.usu.edu Linux web11.usu.edu Linux web13.usu.edu Linux web14.usu.edu Linux web20 Linux web22 Linux web28 Linux web29.usu.edu Linux web30.usu.edu Linux web37.usu.edu Linux webs.usu.edu Linux

References 4