CVE-2025-11145

User Enumeration in CBK Soft's enVision

CVSS 7.5 HIGHEPSS 0.3%CWE-200 CWE-203 CWE-359

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

24 Oct 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Observable Discrepancy, Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc. EnVision allows Account Footprinting. This issue affects enVision: before 250566.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

CBK Soft Software Hardware Electronic Computer Systems Industry and Trade Inc. · enVision

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0361 https://www.usom.gov.tr/bildirim/tr-25-0361