Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Primakon

First CVE: Nov 25, 2025Active for: 1 yearTotal CVEs: 7

Primakon develops project and contract management software serving a specialized but critical business function, and its vulnerability profile concentrates on authorization and access-control weaknesses across its core product line. Vulnerabilities affecting this vendor skew toward serious outcomes, with a meaningful share reaching critical severity, while exposure recurs through weakness classes including improper authorization, access-control bypass conditions, and unintended exposure of sensitive system information—patterns characteristic of business-logic flaws in multi-user enterprise applications. Defenders should prioritize updates for this vendor given the sensitive nature of contract and project data; current exploitation activity and exposure counts are shown alongside this summary.

FAUCET AI Generated
7
Total CVEs
More Total CVEs than 88% of tracked vendors
7.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 99% of tracked vendors
7.8
Avg CVSS Score
Higher Avg CVSS Score than 74% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Primakon over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 25, 2025
7 months ago
Most Recent CVE
Nov 25, 2025
242 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (7 CVEs).

7 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2025-64063CRITICAL
Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard user can exploit this flaw by sending dir
Nov 25, 20259.830NONO
CVE-2025-64065HIGH
The Primakon Pi Portal 1.0.18 API /api/V2/pp_udfv_admin endpoint, fails to perform necessary server-side validation. The administrative LoginAs or user impersonation feature is vul
Nov 25, 20258.828NONO
CVE-2025-64064HIGH
Primakon Pi Portal 1.0.18 /api/v2/pp_users endpoint fails to adequately check user permissions before processing a PATCH request to modify the PP_SECURITY_PROFILE_ID. Because of we
Nov 25, 20258.827NONO
CVE-2025-64066HIGH
Primakon Pi Portal 1.0.18 REST /api/v2/user/register endpoint suffers from a Broken Access Control vulnerability. The endpoint fails to implement any authorization checks, allowing
Nov 25, 20258.627NONO
CVE-2025-64062HIGH
The Primakon Pi Portal 1.0.18 /api/V2/pp_users?email endpoint is used for user data filtering but lacks proper server-side validation against the authenticated session. By manipula
Nov 25, 20258.827NONO
CVE-2025-64067MEDIUM
Primakon Pi Portal 1.0.18 API endpoints responsible for retrieving object-specific or filtered data (e.g., user profiles, project records) fail to implement sufficient server-side
Nov 25, 20255.320NONO
CVE-2025-64061MEDIUM
Primakon Pi Portal 1.0.18 /api/v2/users endpoint is vulnerable to unauthorized data exposure due to deficient access control mechanisms. Any authenticated user, regardless of their
Nov 25, 20254.318NONO
View all 7 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products7 CVEs
29%
57%
14%
Severity distribution among all CVEs352,708 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None7 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low4 (57.1%)
High0 (0.0%)
None3 (42.9%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (7 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Primakon.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Primakon — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Primakon's Products

View all 1 CNAs →

Top CWEs