CVE-2025-9342

MEDIUM 6.5

IDOR in Anadolu Hayat Emeklilik's AHE Mobile

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

14th

Authorization Bypass Through User-Controlled Key vulnerability in Anadolu Hayat Emeklilik Inc. AHE Mobile allows Privilege Abuse. This issue affects AHE Mobile: from 1.9.7 before 1.9.9.

CWE	CWE-639
Vendor	anadolu hayat emeklilik inc.
Product	ahe mobile
Published	Sep 23, 2025
Last Updated	Jun 5, 2026

Stay Ahead of the Next One

Get instant alerts for anadolu hayat emeklilik inc. ahe mobile

Be the first to know when new medium vulnerabilities affecting anadolu hayat emeklilik inc. ahe mobile are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

Anadolu Hayat Emeklilik Inc. / AHE Mobile

1.9.7 < 1.9.9

References

NVD ↗ CVE.org ↗ EPSS Data ↗

usom.gov.tr: https://www.usom.gov.tr/bildirim/tr-25-0287 siberguvenlik.gov.tr: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0287

Credits

Veli Oğuzcan AKDAĞ