{"id":"CVE-2025-31932","state":"PUBLISHED","title":"Deserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is exploited, an arbitrary code is executed on the Management Console.\r","description":"Deserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is exploited, an arbitrary code is executed on the Management Console.\r\nThe vendor provides the workaround information and recommends to apply it to the deployment environment.","publishedAt":"2025-04-11T09:38:50.657Z","updatedAt":"2025-04-11T14:34:57.079Z","severity":{"score":8.8,"label":"High","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"jpcert"},"assigner":"jpcert","products":["OPEN, Inc. BizRobo!"],"affected":[{"vendor":"OPEN, Inc.","product":"BizRobo!","versions":[{"version":"all versions","status":"affected"}]}],"references":["https://knowledge.bizrobo.com/hc/ja/articles/39951710517145","https://knowledge.bizrobo.com/hc/ja/articles/39952052043289","https://knowledge.bizrobo.com/hc/ja/articles/39953373809305","https://knowledge.bizrobo.com/hc/ja/articles/360029772271","https://jvn.jp/en/jp/JVN30641875/"],"weaknesses":["CWE-502"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/31xxx/CVE-2025-31932.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-31932","state":"PUBLISHED","datePublished":"2025-04-11T09:38:50.657Z","dateUpdated":"2025-04-11T14:34:57.079Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2025-04-02T01:34:59.088Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Deserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is exploited, an arbitrary code is executed on the Management Console.\r\nThe vendor provides the workaround information and recommends to apply it to the deployment environment."}],"affected":[{"vendor":"OPEN, Inc.","product":"BizRobo!","versions":[{"version":"all versions","status":"affected"}]}],"references":[{"url":"https://knowledge.bizrobo.com/hc/ja/articles/39951710517145"},{"url":"https://knowledge.bizrobo.com/hc/ja/articles/39952052043289"},{"url":"https://knowledge.bizrobo.com/hc/ja/articles/39953373809305"},{"url":"https://knowledge.bizrobo.com/hc/ja/articles/360029772271"},{"url":"https://jvn.jp/en/jp/JVN30641875/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"HIGH","baseScore":8.8,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-502","description":"Deserialization of untrusted data","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2025-04-11T09:38:50.657Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-11T14:34:41.494488Z","id":"CVE-2025-31932","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-11T14:34:57.079Z"}}]}}}