CVE-2025-25181

🔥 Known Exploited (CISA KEV)MEDIUM

5.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-02-03

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands via the PmSess1 parameter.

Affected Platforms (CPE)

📦

Advantive

Veracore

< 2025.1.1.3

References & Advisories

🔗 https://advantive.my.site.com/support/s/knowledge

🔗 https://intezer.com/blog/research/xe-group-exploiting-zero-days/

🔗 https://www.solissecurity.com/en-us/insights/xe-group-from-credit-card-skimming-to-exploiting-zero-days/

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-25181

Vulnerability Description

Affected Platforms (CPE)

Veracore

References & Advisories

Related Vulnerabilities