CVE-2025-22390
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jan 4, 2025
Updated: Jan 6, 2025
CWE ID 521
Summary
CVE-2025-22390 is a medium-severity vulnerability affecting Optimizely EPiServer.CMS.Core versions prior to 12.32.0. This issue stems from insufficient password complexity requirements within the CMS. Users can create passwords of minimal length, which is just six characters, leaving these passwords susceptible to modern attack techniques like password spraying and offline password cracking.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.