[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDo9bLRse4vzYSDeI1UHuTeFYLMJIWSoUFTuHTZD1TW8":3,"g5a-risk:CVE-2025-3943":166},{"success":4,"data":5,"meta":163},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":42,"epssPercentile":29,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":78,"references":79,"referencesCount":90,"weaknesses":91,"weaknessesCount":100,"isActivelyExploited":69,"cisaInfo":29,"otxData":29,"relatedBlogPosts":101,"seoMetadata":102,"configurations":127,"relatedVendorCves":154,"notableEvents":155},"CVE-2025-3943","What is CVE-2025-3943?","Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.","Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security...","2025-05-22T13:15:57.257","2025-06-04T19:27:46.1",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":40,"CVSSMetricV2":41,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"psirt@honeywell.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:N\u002FA:N","NETWORK","LOW","REQUIRED","CHANGED","NONE",4.1,"MEDIUM",null,2.3,1.4,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":38,"ImpactScore":39},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":26,"UserInteraction":26,"Scope":36,"ConfidentialityImpact":37,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":37,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"UNCHANGED","HIGH",3.9,3.6,[],[],0.10679,[42,42,42,42,42,42,42],"High",[46,51,54,57,60,62,64,70,74],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"tridium","niagara","4.10u10","cpe:2.3:a:tridium:niagara:4.10u10:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":52,"criteria":53,"vulnerable":4},"4.14u1","cpe:2.3:a:tridium:niagara:4.14u1:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":55,"criteria":56,"vulnerable":4},"4.15","cpe:2.3:a:tridium:niagara:4.15:*:*:*:*:*:*:*",{"vendor":47,"product":58,"version":49,"criteria":59,"vulnerable":4},"niagara_enterprise_security","cpe:2.3:a:tridium:niagara_enterprise_security:4.10u10:*:*:*:*:*:*:*",{"vendor":47,"product":58,"version":52,"criteria":61,"vulnerable":4},"cpe:2.3:a:tridium:niagara_enterprise_security:4.14u1:*:*:*:*:*:*:*",{"vendor":47,"product":58,"version":55,"criteria":63,"vulnerable":4},"cpe:2.3:a:tridium:niagara_enterprise_security:4.15:*:*:*:*:*:*:*",{"vendor":65,"product":66,"version":67,"criteria":68,"vulnerable":69},"blackberry","qnx","-","cpe:2.3:o:blackberry:qnx:-:*:*:*:*:*:*:*",false,{"vendor":71,"product":72,"version":67,"criteria":73,"vulnerable":69},"linux","linux_kernel","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",{"vendor":75,"product":76,"version":67,"criteria":77,"vulnerable":69},"microsoft","windows","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",9,[80,85],{"url":81,"source":82,"tags":83},"https:\u002F\u002Fdocs.niagara-community.com\u002Fcategory\u002Ftech_bull","Niagara-community",[84],"Permissions Required",{"url":86,"source":87,"tags":88},"https:\u002F\u002Fhoneywell.com\u002Fus\u002Fen\u002Fproduct-security#security-notices","Honeywell",[89],"Vendor Advisory",2,[92],{"id":93,"name":94,"description":95,"extendedDescription":96,"status":97,"abstraction":98,"structure":99},"CWE-598","Use of GET Request Method With Sensitive Query Strings","The web application uses the HTTP GET method to process a request and includes sensitive information in the query string of that request.","The query string for the URL could be saved in the browser's history, passed through Referers to other web sites, stored in web logs, or otherwise recorded in other sources.  If the query string contains sensitive information such as session identifiers, then attackers can use this information to launch further attacks.","Draft","Variant","Simple",1,[],{"title":103,"metaDescription":104,"keywords":105,"canonicalUrl":106,"structuredData":107},"What is CVE-2025-3943? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-3943, a high severity cyber security vulnerability from 2025. Use of GET Request Method With Sensitive Query Strings vulne...","CVE-2025-3943, CVE-2025-3943 vulnerability, CVE-2025-3943 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, tridium security, blackberry security, linux security, microsoft security, niagara vulnerability, niagara_enterprise_security vulnerability, qnx vulnerability, linux_kernel vulnerability","\u002Fwhat-is\u002Fcve-2025-3943",{"@context":108,"@type":109,"headline":103,"description":104,"datePublished":10,"dateModified":11,"author":110,"publisher":114,"about":118,"mainEntityOfPage":122,"articleSection":125,"keywords":126},"https:\u002F\u002Fschema.org","TechArticle",{"@type":111,"name":112,"url":113},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":111,"name":112,"url":113,"logo":115},{"@type":116,"url":117},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":119,"name":6,"description":120,"additionalType":121},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":123,"@id":124},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-3943","Cybersecurity","CVE-2025-3943, CVE-2025-3943 vulnerability, CVE-2025-3943 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[128],{"Operator":129,"Negate":29,"Nodes":130},"AND",[131,146],{"Operator":132,"Negate":69,"CPEMatch":133},"OR",[134,136,138,140,142,144],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":135,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"0615B9FA-E837-4C21-8968-F3273718DF7D",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":137,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"BEE26A6F-876E-450D-8A5F-EF4A3EF96A13",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":139,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"00C6667A-9873-4A75-AB11-3427AA1E552D",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":141,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"E694C4DB-66F7-4753-81D8-9085B5E3A207",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":143,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"506E75F5-D259-4BAC-9C1A-83C9AD54D608",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":145,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"6DF70636-5B89-4646-80F3-83C906B0EB3C",{"Operator":132,"Negate":69,"CPEMatch":147},[148,150,152],{"Vulnerable":69,"Criteria":68,"MatchCriteriaID":149,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"3642981A-848E-4DEA-A904-A83B9ED4891D",{"Vulnerable":69,"Criteria":73,"MatchCriteriaID":151,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",{"Vulnerable":69,"Criteria":77,"MatchCriteriaID":153,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[156],{"id":157,"eventType":158,"eventTime":159,"details":160,"label":161,"color":162},"a203bf59-df25-4a8f-a8f5-d56b0ce46d2e","NEW_NVD","2025-06-09T22:28:52.581781+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":164,"version":165},1792375450811,"2.0",{"score":167,"band":168,"action":169,"scoredAt":170},50,"Medium","Plan remediation","2026-10-16T07:07:24.970134+00:00"]