« Back to list

Verve

Verve Asset Manager: vulnerabilities and CVEs

Verve Asset Manager has 3 published vulnerabilities, 3 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs3
Last 12 months3
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2025-14377High (8.8)0.19%—Jan 20, 2026
A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext secrets incorrectly stored when a playbook is running. This component has been retired and has…
CVE-2025-14376High (8.6)0.13%—Jan 20, 2026
A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been…
CVE-2025-11862High (8.4)0.32%—Nov 11, 2025
A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API.

🎯 How it gets exploited (ATT&CK techniques)

  1. T1210 Exploitation of Remote Services2
  2. T1552.001 Credentials In Files2
  3. T1068 Exploitation for Privilege Escalation1
  4. T1078 Valid Accounts1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.