Improper permission control in OXARI ServiceDesk

9.3 CVSS

Vulnerability Description

Improper permission control vulnerability in the OXARI ServiceDesk application could allow an attacker using a guest access or an unprivileged account to gain additional administrative permissions in the application.This issue affects OXARI ServiceDesk in versions before 2.0.324.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-1542

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Robert Jaroszuk - Penetration Tester @ Lufthansa Systems Poland

References

Affected Vendor

Infonet Projekt SA

View all reports →

Affected Software

OXARI ServiceDesk

Vulnerable Versions:

Timeline

Official Publish: March 26th, 2025

Last Modified: October 3rd, 2025

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-425

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.