What is the CVSS score of CVE-2025-15331?

CVE-2025-15331 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L. EPSS exploitation probability: 0.1%.

Which versions of Connect are affected by CVE-2025-15331?

CVE-2025-15331 presents moderate security risk rated CVSS 4.3. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-15331?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Connect CVE-2025-15331

MEDIUM

Incomplete Cleanup (CWE-459)

2026-02-05 3938794e-25f5-4123-a1ba-5cbd7f104512

Denial Of Service Connect

4.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 05, 2026 - 19:15 nvd

MEDIUM 4.3

DescriptionCVE.org

Tanium addressed an uncontrolled resource consumption vulnerability in Connect.

AnalysisAI

Tanium addressed an uncontrolled resource consumption vulnerability in Connect. [CVSS 4.3 MEDIUM]

Technical ContextAI

Classified as CWE-459 (Incomplete Cleanup). Affects Connect. Tanium addressed an uncontrolled resource consumption vulnerability in Connect.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Connect

View all

CVE-2021-26715 CRITICAL Act Now POC

9.1 Mar 25

The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery (SSRF)

CVE-2021-27582 CRITICAL Act Now POC

9.1 Feb 23

org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid Connect th

CVE-2020-9442 HIGH This Week POC

7.8 Feb 28

OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10,

CVE-2016-7851 MEDIUM This Month POC

6.1 Nov 08

Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. Rated medi

CVE-2017-11291 CRITICAL Act Now

10.0 Dec 09

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. Rated critical severity (CVSS 10.0), this vulnerabi

CVE-2016-0949 CRITICAL Act Now

9.8 Feb 10

Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted parameter in a URL. Rated

CVE-2022-38131 MEDIUM This Month POC

6.1 Sep 06

RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. Rated medium severity (CVSS 6.1), this vulnera

CVE-2020-5497 MEDIUM This Month POC

6.1 Jan 04

The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being inclu

CVE-2023-4662 CRITICAL Act Now

9.8 Sep 15

Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code Inclusion. Rated criti

CVE-2023-4661 CRITICAL Act Now

9.8 Sep 15

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saphira Saphira Co

CVE-2021-40719 CRITICAL Act Now

9.8 Oct 21

Adobe Connect version 11.2.3 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve a

CVE-2020-4747 CRITICAL Act Now

9.8 Dec 15

IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated C

Same weakness CWE-459 – Incomplete Cleanup

View all

CVE-2017-17090 HIGH POC

7.5

CVE-2025-31650 HIGH POC

7.5

CVE-2024-28265 CRITICAL POC

9.1

CVE-2023-36468 HIGH POC

8.8

CVE-2018-18924 HIGH POC

8.8

CVE-2018-18281 HIGH POC

7.8

CVE-2025-60730 HIGH POC

7.6

CVE-2025-64775 HIGH POC

7.5

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

CVE-2025-15331 vulnerability details – vuln.today

Back

Connect CVE-2025-15331

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Connect

Same weakness CWE-459 – Incomplete Cleanup

Same technique Denial Of Service

Share

External POC / Exploit Code