VDB

CVE-2025-8415

CVE-2025-8415 PUBLISHED CVSS 5.900000095367432 MEDIUM

A vulnerability was found in the Cryostat HTTP API. Cryostat's HTTP API binds to all network interfaces, allowing possible external visibility and access to the API port if Network Policies are disabled, allowing an unauthenticated, malicious attacker to jeopardize the environment.

EPSS 0.33% · 24.8th percentile

Risk Scores

CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.33%
24.8th percentile

Affected Products

VendorProductVersions
Red HatCryostat 4 on RHEL 94.0.2-3
Red HatCryostat 4 on RHEL 94.0.2-3
Red HatCryostat 4 on RHEL 94.0.2-3
Red HatCryostat 4 on RHEL 94.0.2-3
Red HatCryostat 4
Red HatCryostat 4 on RHEL 94.0.2-3
CryostatCryostat0
Red HatCryostat 4
Red HatCryostat 4 on RHEL 94.0.2-3
Red HatCryostat 4 on RHEL 94.0.2-3
Red HatCryostat 4
Red HatCryostat 4 on RHEL 90.5.2-3
Red HatCryostat 4 on RHEL 94.0.2-3
Red HatCryostat 4 on RHEL 94.0.2-3
Red HatCryostat 4 on RHEL 94.0.2-3

Timeline

  • Aug 20, 2025 CVE Published
  • Aug 20, 2025 PoC Published
  • Aug 21, 2025 EPSS Score
  • Aug 30, 2025 EPSS Score
  • Sep 7, 2025 EPSS Score
  • Sep 16, 2025 EPSS Score
  • Sep 25, 2025 EPSS Score
  • Oct 3, 2025 EPSS Score
  • Oct 12, 2025 EPSS Score
  • Oct 21, 2025 EPSS Score
  • Oct 30, 2025 EPSS Score
  • Nov 7, 2025 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›