What is the CVSS score of CVE-2025-6943?

CVE-2025-6943 has a CVSS 3.1 base score of 3.8 (Low). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.0%.

Which versions of Secret Server are affected by CVE-2025-6943?

CVE-2025-6943 is a low-severity vulnerability in Secret Server version 11.7 and earlier involving privilege management (CVSS 3.8).

How to fix or mitigate CVE-2025-6943?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Secret Server CVE-2025-6943

EUVD-2025-19741 LOW

Improper Privilege Management (CWE-269)

2025-07-02 1443cd92-d354-46d2-9290-d812316ca43a

Privilege Escalation

3.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.8 LOW

AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 01:55 euvd

EUVD-2025-19741

Analysis Generated

Mar 16, 2026 - 01:55 vuln.today

CVE Published

Jul 02, 2025 - 16:15 nvd

LOW 3.8

DescriptionCVE.org

Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables.

Analysis

Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables.

Technical ContextAI

Privilege escalation allows a low-privileged user or process to gain elevated permissions beyond what was originally authorized. This vulnerability is classified as Improper Privilege Management (CWE-269).

RemediationAI

Apply the principle of least privilege. Keep systems patched. Monitor for suspicious privilege changes. Use mandatory access controls (SELinux, AppArmor).