CVE-2025-32987

Summary

CVE-2025-32987: The Arctera eDiscovery Platform, versions prior to 10.3.2, include a vulnerability where the Enterprise Vault Collection Module uses a cleartext password on a command line during the EVSearcher process. This issue poses a significant risk as cleartext passwords are easily accessible to unauthorized users, potentially leading to unauthorized access to the eDiscovery Platform. Attackers may exploit this vulnerability to gain privileged access, resulting in data breaches or other malicious activities. System administrators are advised to upgrade to the latest version of the platform or implement other mitigation strategies to protect against this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.