CVE-2025-40887 in Guardianinformation

Résumé

par MITRE • 07/10/2025

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Nozomi

Réserver

16/04/2025

Divulgation

07/10/2025

Modérer

accepté

Entrée

VDB-327385

CPE

prêt

EPSS

0.00024

KEV

non

Activités

très faible

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-40887
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-40887
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-40887/

◂ PrécédentAperçuSuivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!