Onespan Vasco Self-service Portal — known CVE vulnerabilities

Every CVE whose affected-product data names Onespan Vasco Self-service Portal, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2025-25539 — CVSS 6.5 (medium): Local File Inclusion vulnerability in Vasco v3.14and before allows a remote attacker to obtain sensitive information via help menu.