CVE-2025-31909

Summary

CVE-2025-31909 is a Missing Authorization vulnerability affecting Apptivo Business Site CRM versions from n/a to 5.3. This issue permits unauthorized access as a result of incorrectly configured access control security levels. Cybercriminals can exploit this vulnerability to gain unauthorized access to sensitive data or perform unintended actions within the CRM system. Organizations using Apptivo Business Site CRM are advised to apply the necessary patches to mitigate this risk. Failure to address this vulnerability may result in data breaches and other security incidents.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.