Partner Software's Partner Software Product and corresponding Partner Web application use…
Priority MEDIUM 50CWE-1391Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
Partner Software's Partner Software Product and corresponding Partner Web application use the same default username and password for the administrator account across all versions.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00715 53rd percentileScored 2026-11-07
Fix Fixed Partner Web (Partner Software): 4.32.2
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Partner Software | Partner Web | 4.32 to before 4.32.2 | 4.32.2 | Patch available | CNA |
- Partner Web VendorPartner Software Affected 4.32 to before 4.32.2 Fixed in 4.32.2 Patch available CNA
Remediation
- Fix · CNA Partner Web (Partner Software) Fixed in 4.32.2
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Partner Web 4.32.2
3 records Highest priority Priority MEDIUM 2 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2025-05487 Partner Software's Partner Software application and Partner Web application do not…Priority MEDIUM 41
- TI-2025-05489 Partner Software's Partner Software application and Partner Web application allows an…Priority LOW 25
Timeline
- 2026-10-02 Threatist record created from CVE-2025-6077
- 2026-10-03 Alias added: GHSA-7rxx-x775-hwq2
References
More Partner Software vulnerabilities
- TI-2025-05487 Partner Software's Partner Software application and Partner Web application do not… CVSS 3.1HIGH 8.8
- TI-2025-05489 Partner Software's Partner Software application and Partner Web application allows an… CVSS 3.1MEDIUM 5.4
Sources
- CVE-2025-6077 · CVE Program
- CVE-2025-6077 · NVD
- FIRST EPSS
- GHSA-7rxx-x775-hwq2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences