PT-2025-12390 · Unknown · Ebm Maintenance Center

Published 2025-03-21 · Updated 2025-03-21 · CVE-2025-2585

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EBM Maintenance Center (affected versions not specified)

Description The issue allows remote attackers with regular privileges to inject arbitrary SQL commands, potentially leading to the reading, modification, and deletion of database contents. This could result in significant data breaches.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-2585

Affected Products

Ebm Maintenance Center

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-2585 · Security Note
• https://twitter.com/VulmonFeeds/status/1903106309467037853 · Twitter Post
• https://t.me/cvetracker/19589 · Telegram Post
• https://twitter.com/CveFindCom/status/1902911120018485702 · Twitter Post
• https://twitter.com/CVEnew/status/1902937560864727387 · Twitter Post
• https://twitter.com/vulns_space/status/1902917686046126565 · Twitter Post
• https://twcert.org.tw/en/cp-139-10022-8e28e-2.html · Note
• https://twcert.org.tw/tw/cp-132-10021-8786e-1.html · Note
• https://t.me/cvenotify/115611 · Telegram Post
• https://t.me/cvedetector/20778 · Telegram Post