CVE-2020-25566: Sapphireims

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

In SapphireIMS 5.0, it is possible to take over an account by sending a request to the Save_Password form as shown in POC. Notice that we do not require a JSESSIONID in this request and can reset any user’s password by changing the username to that user and password to base64(desired password).

Affected products

• Sapphireims Sapphireims: version 5.0 only

Published 2021-08-11. Last modified 2026-06-17.