AMD Device Management Portal Admp vulnerabilities

2 CVEs affecting AMD Device Management Portal Admp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-62625, published 2026-05-14.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-62619, published 2026-05-14. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to loss of…
• CVE-2025-62625, published 2026-05-14. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to privileged…