CVE-2025-12871: aEnrich｜a+HRD - Authentication Abuse
Published Nov 12, 2025
·Updated
The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges.
Affected Software
2 affected components
aEnrich a+HRD
aEnrich A\+hrd<=7.5
Remediation
Information
Please refer to the aEnrich advisory to upgrade to version 6.8 or later and install the latest patches, or contact aEnrich customer service for assistance.
Event History
Nov 12, 2025
CVE Published
via MITRE·07:38 AM
Data Sourced
via MITRE·07:38 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-12871?
CVE-2025-12871 is considered a critical vulnerability due to its potential to allow unauthenticated remote attackers to gain elevated privileges.
2
How do I fix CVE-2025-12871?
To fix CVE-2025-12871, you should apply the latest security patches provided by aEnrich for the a+HRD software.
3
Who is affected by CVE-2025-12871?
CVE-2025-12871 affects users of the aEnrich a+HRD software.
4
What type of vulnerability is identified in CVE-2025-12871?
CVE-2025-12871 identifies an Authentication Abuse vulnerability.
5
Can CVE-2025-12871 be exploited remotely?
Yes, CVE-2025-12871 can be exploited by unauthenticated remote attackers.