---
id: CVE-2025-11025
title: >-
  Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft
  Information Technologies and Software Inc
summary: >-
  Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft
  Information Technologies and Software Inc. Vimesoft Corporate Messaging
  Platform allows Retrieve Embedded Sensitive Data.


  This issue affects Vimesoft Corporate …
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N'
cwe:
  - CWE-201
published: '2025-09-26'
updated: '2026-10-09'
sourceUpdated: '2026-10-09T10:10:00.193'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-11025'
references:
  - url: 'https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0300'
    label: iletisim@usom.gov.tr
  - url: 'https://www.usom.gov.tr/bildirim/tr-25-0300'
    label: iletisim@usom.gov.tr
tags:
  - nvd
epss: 0.00289
epssPercentile: 0.19663
ingestedAt: '2026-10-09T12:53:27.512Z'
---

## Overview

Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform allows Retrieve Embedded Sensitive Data.

This issue affects Vimesoft Corporate Messaging Platform: from V1.3.0 before V2.0.0.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.