diff --git a/2023/37xxx/CVE-2023-37541.json b/2023/37xxx/CVE-2023-37541.json
index a046521168d..fe144f3dd21 100644
--- a/2023/37xxx/CVE-2023-37541.json
+++ b/2023/37xxx/CVE-2023-37541.json
@@ -40,7 +40,7 @@
"version_data": [
{
"version_affected": "=",
- "version_value": "7.0, 8.0"
+ "version_value": "7, 8"
}
]
}
@@ -54,9 +54,9 @@
"references": {
"reference_data": [
{
- "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114156",
+ "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119435",
"refsource": "MISC",
- "name": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114156"
+ "name": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119435"
}
]
},
diff --git a/2025/0xxx/CVE-2025-0760.json b/2025/0xxx/CVE-2025-0760.json
index 9bc8c6bcfaa..1c9bac9d390 100644
--- a/2025/0xxx/CVE-2025-0760.json
+++ b/2025/0xxx/CVE-2025-0760.json
@@ -1,17 +1,111 @@
{
+ "data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
- "data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-0760",
- "ASSIGNER": "cve@mitre.org",
- "STATE": "RESERVED"
+ "ASSIGNER": "vulnreport@tenable.com",
+ "STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
- "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+ "value": "A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption."
+ }
+ ]
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "CWE-522 Insufficiently Protected Credentials",
+ "cweId": "CWE-522"
+ }
+ ]
+ }
+ ]
+ },
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Tenable",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Tenable Identity Exposure",
+ "version": {
+ "version_data": [
+ {
+ "version_value": "not down converted",
+ "x_cve_json_5_version_data": {
+ "versions": [
+ {
+ "lessThan": "3.77.9",
+ "status": "affected",
+ "version": "0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "affected"
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ },
+ "references": {
+ "reference_data": [
+ {
+ "url": "https://www.tenable.com/security/tns-2025-01",
+ "refsource": "MISC",
+ "name": "https://www.tenable.com/security/tns-2025-01"
+ }
+ ]
+ },
+ "generator": {
+ "engine": "Vulnogram 0.2.0"
+ },
+ "source": {
+ "advisory": "TNS-2025-01",
+ "discovery": "EXTERNAL"
+ },
+ "solution": [
+ {
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "base64": false,
+ "type": "text/html",
+ "value": "Tenable has released Tenable Identity Exposure Version 3.77.9, which includes fixes to address these issues. The installation files can be obtained from the Tenable Downloads Portal: https://www.tenable.com/downloads/identity-exposure\n\n
"
+ }
+ ],
+ "value": "Tenable has released Tenable Identity Exposure Version 3.77.9, which includes fixes to address these issues. The installation files can be obtained from the Tenable Downloads Portal: https://www.tenable.com/downloads/identity-exposure"
+ }
+ ],
+ "impact": {
+ "cvss": [
+ {
+ "attackComplexity": "LOW",
+ "attackVector": "NETWORK",
+ "availabilityImpact": "NONE",
+ "baseScore": 2.7,
+ "baseSeverity": "LOW",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "NONE",
+ "privilegesRequired": "HIGH",
+ "scope": "UNCHANGED",
+ "userInteraction": "NONE",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
+ "version": "3.1"
}
]
}
diff --git a/2025/1xxx/CVE-2025-1067.json b/2025/1xxx/CVE-2025-1067.json
index c11f655ee7a..63775690978 100644
--- a/2025/1xxx/CVE-2025-1067.json
+++ b/2025/1xxx/CVE-2025-1067.json
@@ -11,7 +11,7 @@
"description_data": [
{
"lang": "eng",
- "value": "There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4\u00a0that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS \n\nArcGIS Pro \n\n, the file could execute and run malicious commands under the context of the victim."
+ "value": "There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4\u00a0that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS ArcGIS Pro, the file could execute and run malicious commands under the context of the victim."
}
]
},
diff --git a/2025/1xxx/CVE-2025-1068.json b/2025/1xxx/CVE-2025-1068.json
index 08e185fcf07..fbf934c87d2 100644
--- a/2025/1xxx/CVE-2025-1068.json
+++ b/2025/1xxx/CVE-2025-1068.json
@@ -11,7 +11,7 @@
"description_data": [
{
"lang": "eng",
- "value": "There is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS AllSource, the file could execute and run malicious commands under the context of the victim."
+ "value": "There is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS AllSource, the file could execute and run malicious commands under the context of the victim. This issue is corrected in ArcGIS AllSource 1.2.1 and 1.3.1."
}
]
},
diff --git a/2025/1xxx/CVE-2025-1091.json b/2025/1xxx/CVE-2025-1091.json
index 08e986a5389..b81ef0f6d18 100644
--- a/2025/1xxx/CVE-2025-1091.json
+++ b/2025/1xxx/CVE-2025-1091.json
@@ -1,17 +1,111 @@
{
+ "data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
- "data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-1091",
- "ASSIGNER": "cve@mitre.org",
- "STATE": "RESERVED"
+ "ASSIGNER": "vulnreport@tenable.com",
+ "STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
- "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+ "value": "A Broken Authorization schema exists where any authenticated user could download IOA script and configuration files if the URL is known."
+ }
+ ]
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "CWE-862 Missing Authorization",
+ "cweId": "CWE-862"
+ }
+ ]
+ }
+ ]
+ },
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Tenable",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Tenable Identity Exposure",
+ "version": {
+ "version_data": [
+ {
+ "version_value": "not down converted",
+ "x_cve_json_5_version_data": {
+ "versions": [
+ {
+ "lessThan": "3.77.9",
+ "status": "affected",
+ "version": "0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "affected"
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ },
+ "references": {
+ "reference_data": [
+ {
+ "url": "https://www.tenable.com/security/tns-2025-01",
+ "refsource": "MISC",
+ "name": "https://www.tenable.com/security/tns-2025-01"
+ }
+ ]
+ },
+ "generator": {
+ "engine": "Vulnogram 0.2.0"
+ },
+ "source": {
+ "advisory": "TNS-2025-01",
+ "discovery": "EXTERNAL"
+ },
+ "solution": [
+ {
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "base64": false,
+ "type": "text/html",
+ "value": "Tenable has released Tenable Identity Exposure Version 3.77.9, which includes fixes to address these issues. The installation files can be obtained from the Tenable Downloads Portal: https://www.tenable.com/downloads/identity-exposure\n\n
"
+ }
+ ],
+ "value": "Tenable has released Tenable Identity Exposure Version 3.77.9, which includes fixes to address these issues. The installation files can be obtained from the Tenable Downloads Portal: https://www.tenable.com/downloads/identity-exposure"
+ }
+ ],
+ "impact": {
+ "cvss": [
+ {
+ "attackComplexity": "LOW",
+ "attackVector": "NETWORK",
+ "availabilityImpact": "NONE",
+ "baseScore": 4.3,
+ "baseSeverity": "MEDIUM",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "NONE",
+ "privilegesRequired": "LOW",
+ "scope": "UNCHANGED",
+ "userInteraction": "NONE",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+ "version": "3.1"
}
]
}
diff --git a/2025/1xxx/CVE-2025-1704.json b/2025/1xxx/CVE-2025-1704.json
new file mode 100644
index 00000000000..b3ab9973c9b
--- /dev/null
+++ b/2025/1xxx/CVE-2025-1704.json
@@ -0,0 +1,18 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "CVE_data_meta": {
+ "ID": "CVE-2025-1704",
+ "ASSIGNER": "cve@mitre.org",
+ "STATE": "RESERVED"
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+ }
+ ]
+ }
+}
\ No newline at end of file
diff --git a/2025/1xxx/CVE-2025-1705.json b/2025/1xxx/CVE-2025-1705.json
new file mode 100644
index 00000000000..89bd914dcdf
--- /dev/null
+++ b/2025/1xxx/CVE-2025-1705.json
@@ -0,0 +1,18 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "CVE_data_meta": {
+ "ID": "CVE-2025-1705",
+ "ASSIGNER": "cve@mitre.org",
+ "STATE": "RESERVED"
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+ }
+ ]
+ }
+}
\ No newline at end of file