CVE-2025-12870: aEnrich｜eHRD - Authentication Abuse

Q: What is the severity of CVE-2025-12870?

CVE-2025-12870 is considered a critical vulnerability due to its potential to grant unauthorized access to administrative privileges.

Q: How do I fix CVE-2025-12870?

To fix CVE-2025-12870, ensure that your aEnrich eHRD software is updated to the latest version that addresses this vulnerability.

Q: Who is affected by CVE-2025-12870?

Any users of the aEnrich eHRD software are potentially affected by CVE-2025-12870.

Q: What type of attack does CVE-2025-12870 enable?

CVE-2025-12870 enables unauthenticated remote attackers to gain administrator access tokens through crafted packets.

Q: What is the potential impact of CVE-2025-12870?

The potential impact of CVE-2025-12870 includes unauthorized access to system functionality and data with elevated privileges.

Published Nov 12, 2025

Updated

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges.

Affected Software

2 affected components

aEnrich eHRD

aEnrich A\+hrd<=7.5

Remediation

Information

Please refer to the aEnrich advisory to upgrade to version 6.8 or later and install the latest patches, or contact aEnrich customer service for assistance.

Event History

Nov 12, 2025

CVE Published

via MITRE·07:35 AM

Data Sourced

via MITRE·07:35 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-12870?

CVE-2025-12870 is considered a critical vulnerability due to its potential to grant unauthorized access to administrative privileges.

How do I fix CVE-2025-12870?