CVE-2025-8532

Medium

Description

Authorization Bypass Through User-Controlled Key, Improper Authorization vulnerability in Bimser Solution Software Trade Inc. EBA Document and Workflow Management System allows Forceful Browsing. This issue affects eBA Document and Workflow Management System: from 6.7.164 before 6.7.166.

SeverityMedium
CVSS6.4
Exploit probability—
ProducteBA Document and Workflow Management System
PublishedSep 19, 2025
First seenSep 19, 2025

How to fix

Update
  • Bimser Solution Software Trade Inc. eBA Document and Workflow Management System6.7.166 or later

Affected products

ProductAffected versionsFixed in
Bimser Solution Software Trade Inc. eBA Document and Workflow Management System6.7.164 ≤ v < 6.7.1666.7.166

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.