CVEvulnerability

CVE-2025-7674

7.1 HIGH Published 2025-08-05 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2025-08-05
Last modified: 2026-06-17
Assigner: 5cdcf916-2b10-4ec8-bfc1-d054821e439e
CVSS 4.0 (5cdcf916-2b10-4ec8-bfc1-d054821e439e): 7.1 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Green
Weaknesses: CWE-20

Description

Improper Input Validation vulnerability in Roche Diagnostics navify Monitoring allows an attacker to manipulate input data, which may lead to a denial of service (DoS) due to negatively impacting the server's performance. This vulnerability has no impact on data confidentiality or integrity. This issue affects navify Monitoring before 1.08.00.

Weakness · CWE (1)

CWE-20 Improper Input Validation weakness

References

https://preview-owp.roche.com/content/dam/diagnostics/Blueprint/en/pdf/navify%20Monitoring%20-%20API%20Input%20Validation%20Vulnerability%20-%20Product%20Security%20Advisory.pdf preview-owp.roche.com

CVE-2025-7674

Description

Related

Weakness · CWE (1)

References