CVE-2025-27581 - CVE House
Back to Database
Status published Medium CVE-2025-27581

NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67...

Vulnerability Description

NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-27581

Credits & Attribution

No credits recorded in the NVD database.

References

More from NIH

View All →
CVE-2025-27580
NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67...
High 7.5

Affected Vendor

Affected Software

BRICS
Vulnerable Versions:
0

Timeline

Official Publish: April 23rd, 2025
Last Modified: April 24th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weaknesses (CWE)

CWE-425

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.