CVE-2025-60805

—

CVSS 3.1

7.5 high

EPSS

<1%p27

Published

Oct 28, 2025 (Oct 28, 2025)

Modified

Jul 5, 2026

Description

An issue was discovered in BESSystem BES Application Server thru 9.5.x allowing unauthorized attackers to gain sensitive information via the "pre-resource" option in bes-web.xml.

Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.