platform vulnerabilities

5 known CVE vulnerabilities in platform, translated and rated.

CVE-2025-25176Critical
Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platform.
CVE-2025-57213High
Incorrect access control in the orderService.queryObject component of platform v1.0.0 allows attackers to access sensitive information via a crafted request.
CVE-2025-57212High
Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive information via a crafted request.
CVE-2025-57210High
Incorrect access control in the ApiPayController.java component of platform v1.0.0 allows attackers to access sensitive information via unspecified vectors.
CVE-2025-54548Medium
On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS