CVE-2025-25615

Summary

CVE-2025-25615 is a newly disclosed cybersecurity vulnerability in Unifiedtransform 2.0. This issue involves a misconfiguration in access control, allowing unauthorized users to gain access to attendance lists for all class sections. As a result, sensitive information regarding student attendance can be exposed, potentially leading to privacy violations. Organizations that use Unifiedtransform 2.0 are urged to apply the necessary patches or updates to mitigate this risk. This vulnerability underscores the importance of implementing strict access control measures to protect sensitive data.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.