Which versions of Ngc Explorer are affected by CVE-2025-4528?

Organizations using Dígitro NGC Explorer should be aware of moderate risk from CVE-2025-4528 rated CVSS 5.3. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-4528?

Within 30 days: Identify affected systems running Dígitro NGC Explorer and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Ngc Explorer CVE-2025-4528

Q: What is the CVSS score of CVE-2025-4528?

CVE-2025-4528 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

LOW

Insufficient Session Expiration (CWE-613)

2025-05-11 cna@vuldb.com

Information Disclosure Ngc Explorer Digitro

2.1

CVSS 4.0 · Vendor: vuldb

Severity by source

Vendor (vuldb) PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (vuldb) · only source for this CVE.

CVSS VectorVendor: vuldb

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

May 27, 2026 - 19:37 NVD

MEDIUM LOW

CVSS changed

May 27, 2026 - 19:37 NVD

5.3 (MEDIUM) 2.1 (LOW)

Analysis Generated

Mar 28, 2026 - 18:41 vuln.today

CVE Published

May 11, 2025 - 03:15 nvd

MEDIUM 5.3

DescriptionCVE.org

A vulnerability was found in Dígitro NGC Explorer up to 3.44.15 and classified as problematic. This issue affects some unknown processing. The manipulation leads to session expiration. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

A vulnerability was found in Dígitro NGC Explorer up to 3.44.15 and classified as problematic. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-613. A vulnerability was found in Dígitro NGC Explorer up to 3.44.15 and classified as problematic. The manipulation leads to session expiration. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. Affected products include: Digitro Ngc Explorer. Version information: up to 3.44.15.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.