CVE-2025-5087
Medium
Description
Kaleris NAVIS N4 ULC (Ultra Light Client) communicates insecurely using zlib-compressed data over HTTP. An attacker capable of observing network traffic between Ultra Light Clients and N4 servers can extract sensitive information, including plaintext credentials.
SeverityMedium
CVSS6.0
Exploit probability—
ProductNavis N4
PublishedJun 24, 2025
First seenJun 24, 2025
Weakness typeCWE-319CWE-319
How to fix
Update
- Kaleris Navis N44.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Kaleris Navis N4 | v < 4.0 | 4.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.