Nih Brics vulnerabilities
2 vulnerabilities
Known vulnerabilities in Nih Brics, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2025-27581nih · bricsnih bricsNIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints.CVSS4.3MediumEPSS0.38%RoutineCVE-2025-27580nih · bricsnih bricsNIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, time, and the fixed 7Dl9#dj- string) and thus allows unauthenticated users with a Common Access Card (CAC) to escalate privileges and compromise any account, including administrators.CVSS7.5HighEPSS0.72%