High severity7.5NVD Advisory· Published Jun 10, 2025· Updated Jun 17, 2026

CVE-2025-40659

Description

An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelectionNetworks.asp.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

DM Corporative CMS/DM Corporative CMSllm-create
Dmacroweb/Dm Corporative CMSv5
Range: 0

Patches

Vulnerability mechanics

References

www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-dm-corporative-cms-dmacrowebnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000