Vulnerability · Published Dec 15, 2025 · Assigned by twcert
CVE-2025-14712JHENG GAO｜Student Learning Assessment and Support System - Exposure of Sensitive Information
High 7.5
In plain English
A high-severity security flaw in Student Learning Assessment and Support System from JHENG GAO. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.4%top 67.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Student Learning Assessment and Support System developed by JHENG GAO has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a specific page and obtain test accounts and password.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| JHENG GAO | Student Learning Assessment and Support System | 0 |
Weakness: CWE-497 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://www.twcert.org.tw/tw/cp-132-10570-72e31-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-10571-a0c2a-2.html third-party-advisory