CVE-2025-34411 | EQS Convercent Whistleblowing Platform up to 2025-12-15 API Endpoint /GetLegalEntity authorization

A vulnerability was found in EQS Convercent Whistleblowing Platform up to 2025-12-15. It has been classified as problematic. Affected is an unknown function of the file /GetLegalEntity of the component API Endpoint. The manipulation leads to missing authorization.

This vulnerability is uniquely identified as CVE-2025-34411. The attack is possible to be carried out remotely. No exploit exists.