CVEvulnerability

CVE-2025-4762

2.0 LOW Published 2025-05-15 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2025-05-15
Last modified: 2026-06-17
Assigner: 8ca67973-55d1-4246-bb7c-ce7e65ad8782
CVSS 4.0 (8ca67973-55d1-4246-bb7c-ce7e65ad8782): 2.0 LOW — CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses: CWE-20

Description

Insecure Direct Object Reference (IDOR) vulnerability in the eSignaViewer component in eSigna product versions 1.0 to 1.5 on all platforms allow an unauthenticated attacker to access arbitrary files in the document system via manipulation of file paths and object identifiers.

Weakness · CWE (1)

CWE-20 Improper Input Validation weakness

References

https://edgewatch.com/vulnerability-advisories/path-traversal-and-idor-vulnerabilities-in-esignaviewer-allow-unauthorized-file-access/ edgewatch.com

CVE-2025-4762

Description

Related

Weakness · CWE (1)

References