CVE-2025-8095

The record

The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform.  It has been identified as cryptographically weak and unsuitable for stored encodings and enterprise applications.  OECH1 encodings should be considered exploitable and immediately replaced by any other supported prefix encoding, all of which are based on symmetric encryption.

Affected packages

Related vulnerabilities

• CVE-2026-65309 ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user… CWE-257
• CVE-2026-1836 The system stores the username and password from the login form after submitting the… CWE-257
• CVE-2026-22576 A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS… CWE-257
• CVE-2026-22574 A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS… CWE-257
• CVE-2016-15058 Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to… CWE-257
• CVE-2026-22614 The encryption mechanism used in Eaton's EasySoft project file was insecure and… CWE-257
• CVE-2026-30785 Improperly Controlled Modification of Object Prototype Attributes ('Prototype… CWE-257
• CVE-2026-20128 A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN… CWE-257