CVE-2025-11151HIGH 8.2EPSS p17.4%

CVE-2025-11151CVE-2025-11151

Description

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages. This issue affects CityPLus: before V24.29500.1.0.

Scoring

CVSS 3.18.2 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
EPSS0.26% probability of exploitation · percentile 17.4% · 2026-06-19T12:03:05Z
Published2025-10-21
Last modified2026-06-04

Underlying weaknesses· 2

CWE-200CWE-497

References

  1. https://www.usom.gov.tr/bildirim/tr-25-0351

2

TypeTargetConfidenceTier
WeaknessExposure of Sensitive Information to an Unauthorized Actorcwe-2000%live
WeaknessExposure of Sensitive System Information to an Unauthorized Control Spherecwe-4970%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-10468
CVE
CVE-2025-11959
CVE
CVE-2023-1114
CVE
CVE-2025-11145
CVE
CVE-2025-13129
CVE
CVE-2025-7016
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.