CVE-2025-15065
Data Exposure in Kings Information & Network KESS Enterprise
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.6EPSS 0.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
29 Dec 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Exposure of Sensitive Information to an Unauthorized Actor, Missing Encryption of Sensitive Data, Files or Directories Accessible to External Parties vulnerability in Kings Information & Network Co. KESS Enterprise on Windows allows Privilege Escalation, Modify Existing Service, Modify Shared File.This issue affects KESS Enterprise: before *.25.9.19.exe
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
Affected products
Kings Information & Network Co. · KESS EnterpriseWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →