CVE-2025-25181
CVSS Score
5.8
EPSS Score
0.0%
EPSS Percentile
0th
A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands via the PmSess1 parameter.
| CWE | CWE-89 |
| Vendor | advantive |
| Product | veracore |
| Published | Feb 3, 2025 |
| Last Updated | Feb 26, 2026 |
⚠️ Actively Exploited — Act Now
Get instant alerts for advantive veracore
This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2025-25181.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Advantive / VeraCore
0 ≤ 2025.1.0
References
advantive.my.site.com: https://advantive.my.site.com/support/s/knowledge intezer.com: https://intezer.com/blog/research/xe-group-exploiting-zero-days/ solissecurity.com: https://www.solissecurity.com/en-us/insights/xe-group-from-credit-card-skimming-to-exploiting-zero-days/ cisa.gov: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-25181