CVE-2025-25181: Advantive VeraCore SQL Injection Vulnerability. Advantive
Advantive VeraCore SQL Injection Vulnerability. Advantive VeraCore contains a SQL injection vulnerability in timeoutWarning.asp that allows a remote attacker to execute arbitrary SQL commands via the PmSess1 parameter.
- CISA KEV-listed (remediation due 2025-03-31)
- EPSS 72.1% (98.8% percentile)