Skip to main content

CVE-2025-14750

External Control of Assumed-Immutable Web Parameter (CWE-472)
2026-01-22 ics-cert@hq.dhs.gov
Information Disclosure

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
CVE Published
Jan 22, 2026 - 22:16 nvd
N/A

DescriptionCVE.org

The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. A low-privileged user can modify the parameters and potentially manipulate account-level privileges.

Analysis

The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. A low-privileged user can modify the parameters and potentially manipulate account-level privileges.

Technical ContextAI

The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. A low-privileged user can modify the parameters and potentially manipulate account-level privileges.

Affected ProductsAI

The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. A low-privileged us

RemediationAI

Monitor vendor advisories for a patch.

Same weakness CWE-472 – External Control of Assumed-Immutable Web Parameter

View all
CVE-2025-35939 MEDIUM
6.9
CVE-2017-5260 HIGH POC
8.8
CVE-2017-5261 HIGH POC
8.8
CVE-2024-7025 HIGH POC
8.8
CVE-2025-43933 CRITICAL
9.8
CVE-2025-43930 CRITICAL
9.8
CVE-2024-25153 CRITICAL
9.8
CVE-2021-1295 CRITICAL
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2025-14750 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy