CVE-2025-8095

CVE-2025-8095 affects Progress OpenEdge's OECH1 prefix encoding mechanism, which is used to obfuscate values across the platform but has been determined to be cryptographically weak and unsuitable for enterprise use. The vulnerability impacts any system relying on OECH1 encoding for stored values, with Progress recommending immediate replacement with alternative supported prefix encodings that use symmetric encryption. While specific CVSS metrics are unavailable, the vulnerability carries a FAUCET Risk Score of 52.0/100 and an EPSS score of 0.00031, indicating relatively low exploit probability. The attack vector and technical complexity details are not documented, but the core issue is that OECH1-encoded values should be considered exploitable and require urgent remediation. There is currently no evidence of active exploitation in the wild, no public exploit code availability, and the vulnerability remains inactive on the Known Exploited Vulnerabilities (KEV) catalog, suggesting limited immediate community attention or threat actor focus.