What is the CVSS score of CVE-2025-15567?

CVE-2025-15567 has a CVSS 3.1 base score of 3.3 (Low). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Health Module are affected by CVE-2025-15567?

CVE-2025-15567 is a low-severity vulnerability (CVSS 3.3). The limited severity suggests constrained impact, typically requiring specific conditions or local access for exploitation.

How to fix or mitigate CVE-2025-15567?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Health Module CVE-2025-15567

LOW

Missing Authentication for Critical Function (CWE-306)

2026-02-27 security@vivo.com

Information Disclosure Health Module

3.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.3 LOW

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 27, 2026 - 07:17 nvd

LOW 3.3

DescriptionCVE.org

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure.

AnalysisAI

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure. [CVSS 3.3 LOW]

Technical ContextAI

Classified as CWE-306 (Missing Authentication for Critical Function). Affects the Health component of Health Module. Insufficient protection mechanisms in the Health Module may lead to partial information disclosure.