CVE-2025-8095: Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge
The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform. It has been identified as cryptographically weak and unsuitable for stored encodings and enterprise applications. OECH1 encodings should be considered exploitable and immediately replaced by any other supported prefix encoding, all of which are based on symmetric encryption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8095?
CVE-2025-8095 is considered a high severity vulnerability due to its cryptographic weakness in the OECH1 prefix encoding.
How do I fix CVE-2025-8095?
To fix CVE-2025-8095, replace the OECH1 prefix encoding with a stronger encryption method and review your data obfuscation strategies.
Which software is affected by CVE-2025-8095?
CVE-2025-8095 affects Progress Software OpenEdge due to its use of the OECH1 encoding method.
What are the risks associated with CVE-2025-8095?
The risks of CVE-2025-8095 include potential data exposure and compromised integrity of sensitive information stored using weak obfuscation.
When was CVE-2025-8095 published?
CVE-2025-8095 was published as part of ongoing security assessments of cryptographic implementations within OpenEdge.