Skip to main content

Process Optimization CVE-2025-64729

HIGH
Missing Authorization (CWE-862)
2026-01-16 ics-cert@hq.dhs.gov
Authentication Bypass Process Optimization
8.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.1 HIGH
AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
Low

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
CVE Published
Jan 16, 2026 - 02:16 nvd
HIGH 8.1

DescriptionCVE.org

The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to tamper with Process Optimization project files, embed code, and escalate their privileges to the identity of a victim user who subsequently interacts with the project files.

AnalysisAI

The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to tamper with Process Optimization project files, embed code, and escalate their privileges to the identity of a victim user who subsequently interacts with the project files. [CVSS 8.1 HIGH]

Technical ContextAI

Classified as CWE-862 (Missing Authorization). Affects Process Optimization. The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to tamper with Process Optimization project files, embed code, and escalate their privileges to the identity of a victim user who subsequently interacts with the project files.

RemediationAI

Monitor vendor advisories for a patch.

More in Process Optimization

View all
CVE-2025-61937 CRITICAL
10.0 Jan 16

A CVSS 10.0 code injection vulnerability allows unauthenticated attackers to achieve remote code execution with OS-level
CVE-2025-64691 HIGH
8.8 Jan 16

The vulnerability, if exploited, could allow an authenticated miscreant (OS standard user) to tamper with TCL Macro scr
CVE-2025-65118 HIGH
8.8 Jan 16

The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to trick Process Optimizatio
CVE-2025-61943 HIGH
8.4 Jan 16

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Standard User) to tamper

CVE-2025-65117 HIGH
7.4 Jan 16

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Designer User) to embed O
CVE-2025-64769 HIGH
7.1 Jan 16

The Process Optimization application suite leverages connection channels/protocols that by-default are not encrypted an

Same weakness CWE-862 – Missing Authorization

View all
CVE-2023-52163 HIGH POC
8.8
CVE-2025-6205 CRITICAL POC
9.1
CVE-2017-9232 CRITICAL POC
9.8
CVE-2023-6875 CRITICAL POC
9.8
CVE-2024-4898 CRITICAL POC
9.8
CVE-2023-32117 CRITICAL POC
9.8
CVE-2025-20362 MEDIUM POC
6.5
CVE-2020-36719 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2025-64729 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy