CVE-2025-9031: Divvydrive Information Technologies Inc Divvydrive Web

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Observable Timing Discrepancy vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive Web allows Cross-Domain Search Timing. This issue affects DivvyDrive Web: from 4.8.2.2 before 4.8.2.15.

Affected products

• Divvydrive Information Technologies Inc Divvydrive Web: from 4.8.2.2, before 4.8.2.15 (fixed in 4.8.2.15)

Published 2025-09-24. Last modified 2026-09-26.