1. Home
  2. CVE Database
  3. CVE-2025-3027
MEDIUM · 6.1

CVE-2025-3027

The vulnerability exists in the EJBCA service, version 8.0 Enterprise. By making a small change to the PATH of the URL associated with the service, the server fails to find the requested file and redi...

Vulnerability Description

The vulnerability exists in the EJBCA service, version 8.0 Enterprise. By making a small change to the PATH of the URL associated with the service, the server fails to find the requested file and redirects to an external page. This vulnerability could allow users to be redirected to potentially malicious external sites, which can be exploited for phishing or other social engineering attacks.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
PrimekeyEjbca>= 8.0, < 9.1

Related Weaknesses (CWE)

CWE-601

References

FAQ

What is CVE-2025-3027?

CVE-2025-3027 is a vulnerability with a CVSS score of 6.1 (MEDIUM). The vulnerability exists in the EJBCA service, version 8.0 Enterprise. By making a small change to the PATH of the URL associated with the service, the server fails to find the requested file and redi...

How severe is CVE-2025-3027?

CVE-2025-3027 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-3027?

Check the references section above for vendor advisories and patch information. Affected products include: Primekey Ejbca.