← Back

Passrecovery

passrecovery

Vendor: Arandasoft • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-45994
1Arandasoft
1Passrecovery
Jun 17, 2026
Sep 26, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue in Aranda PassRecovery v1.0 allows attackers to enumerate valid user accounts in Active Directory via sending a crafted POST request to /user/existdirectory/1.