CVE-2020-25105: Eramba

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has only a million possibilities).

Affected products

• Eramba Eramba: version 2.8.1 only; version 2.19.3 only

Published 2020-09-03. Last modified 2026-06-17.