Threats Tagged 'cve-2025-13084'
View all threats tagged with 'cve-2025-13084'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-13084'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-13084 is a high-severity vulnerability in Opto 22's groov View Server R1.0a where the users endpoint in the API exposes all users' metadata including API keys to any user with Editor role privileges. This exposure includes Administrator API keys, potentially allowing privilege escalation or unauthorized access to critical system functions. The vulnerability requires network access and Editor-level privileges but no user interaction, and it impacts confidentiality and availability. No known exploits are currently reported in the wild. European organizations using groov View Server in industrial control or automation environments are at risk, especially those with Editor role users who might be targeted or compromised. Mitigation requires restricting Editor role assignments, monitoring API access logs, and applying vendor patches once available. Countries with significant industrial automation sectors and Opto 22 deployments, such as Germany, France, Italy, and the UK, are most likely to be affected. The CVSS score of 7.6 reflects the high confidentiality impact and ease of exploitation with low attack complexity. Join the discussion | CVE Database V5 | 11/26/2025, 17:39:37 UTC Added: 11/26/2025, 17:47:39 UTC |
Showing 1 to 1 of 1 result