CVE-2025-61075
High · 8.1CVSS
8.1
EPSS
0.5%
Published
Dec 9, 2025
CISA due date
—
The record
Multiple Incorrect Access Control vulnerabilities in adata Software GmbH Mitarbeiterportal 2.15.2.0 allow remote authenticated, low-privileged users to carry out administrative functions and manipulate data of other users via unauthorized API calls.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|