NetSight
critical9.8

CVE-2025-9254

WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to log into the system as arbitrary users by e…

Impact

WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to log into the system as arbitrary users by exploiting a specific functionality.

Affected products

VendorProductAffected versions
UniongWebitr
before 2_1_0_33

Weakness classification

References