CVE-2025-15023

HighCVSS 8.8

Published: 14/05/2026(UTC)Updated: 07/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

11th percentile - higher than 11% of all known CVEs

Summary

The vulnerability related to incorrect authorization in the Yordam Library Automation System allows exploiting incorrectly configured access control security levels. It affects versions from 19.5 to before 22.1.

Risk Assessment

Organizations may be exposed to unauthorized access to sensitive data within the library automation system, potentially leading to a loss of information confidentiality.

Recommendation

It is recommended to upgrade the library automation system to version 22.1 or newer to mitigate this vulnerability.

Other vulnerabilities in Yordam Library Automation System

CVE-2025-15024High
The Yordam Library Automation System has a code injection vulnerability that allows remote code inclusion. This issue affects versions from 19.5 to before 22.1.

Original NVD description (English source)

Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Library Automation System: from v.19.5 before v.22.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS