Vulnerability · Published Aug 20, 2025 · Assigned by jpcert
CVE-2025-54551
Medium 4.3
In plain English
A medium-severity security flaw in Synapse Mobility from FUJIFILM Healthcare Americas Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.2%top 83.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Synapse Mobility 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1 contain a privilege escalation vulnerability through external control of Web parameter. If exploited, a user of the product may escalate the privilege and access data that the user do not have permission to view by altering the parameters of the search function.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| FUJIFILM Healthcare Americas Corporation | Synapse Mobility | 8.08.0.18.0.28.1and 8.1.1 |
Weakness: CWE-472 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N