CVE-2025-34156
NoneCVSS
—
EPSS
0.4%
Published
Oct 23, 2025
CISA due date
—
The record
Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp. The page discloses Java system properties, server path details, and version information to unauthorized users, resulting in information disclosure that could aid further compromise.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-76968 SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an… CWE-497
- CVE-2026-80119 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-497
- CVE-2026-80118 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-497
- CVE-2026-66840 XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized… CWE-497
- CVE-2026-67267 Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive… CWE-497
- CVE-2026-74007 Unauthenticated Sensitive Data Exposure in 3D FlipBook – PDF Flipbook Viewer, Flipbook… CWE-497
- CVE-2026-32468 Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions. CWE-497
- CVE-2026-66462 Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions. CWE-497