Vulnerability · Published Dec 1, 2025 · Assigned by TR-CERT
CVE-2025-13129Business Logic Error in Seneka Software's Onaylarım
Medium 4.3
In plain English
A medium-severity security flaw in Onaylarım from Seneka Software Hardware Information Technology Trade Contracting and Industry Ltd. Co.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.2%top 87.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper Enforcement of Behavioral Workflow vulnerability in Seneka Software Hardware Information Technology Trade Contracting and Industry Ltd. Co. Onaylarım allows Functionality Misuse. This issue affects Onaylarım: from 25.09.26.01 through 18112025.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Seneka Software Hardware Information Technology Trade Contracting and Industry Ltd. Co. | Onaylarım | 25.09.26.01 – through 18112025 |
Weakness: CWE-841 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
References
- https://www.usom.gov.tr/bildirim/tr-25-0422 government-resource, broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0422 government-resource