CVE-2019-25666: Nsasoft Spotauditor

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application. Attackers can supply an oversized Base64 string through the decoder interface to trigger a denial of service condition.

Affected products

• Nsasoft Spotauditor: up to and including 3.6.7

Published 2026-04-05. Last modified 2026-07-24.