CVE-2025-25181 Advantive VeraCore
Advantive VeraCore contains a SQL injection vulnerability in timeoutWarning.asp that allows a remote attacker to execute arbitrary SQL commands via the PmSess1 parameter.
- CVSS
- not scored
On CISA’s exploited list
Advantive VeraCore SQL Injection Vulnerability
- Added
- 2025-03-10
- Federal patch deadline
- 2025-03-31
- Ransomware use
- not known