by Kastro
Paper/Archive/CVE-2025-6077

CVE-2025-6077

Partner Software Partner Web — CVE-2025-6077

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 53.4.534 × 2010.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Partner Software's Partner Software Product and corresponding Partner Web application use the same default username and password for the administrator account across all versions.

Affected

ProductAffectedFixed inSource
Partner Web4.32 – < 4.32.24.32.2CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refpartnersoftware.com/resources/software-release-info-4-32refkb.cert.org/vuls/id/317469refkb.cert.org/vuls/id/317469