PT-2025-49976 · Talentsoft · Talentsoft Unis

Akıner Kisa · Published 2025-12-09 · Updated 2025-12-14 · CVE-2025-12504

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TalentSoft Software UNIS versions prior to 42321

Description A flaw exists in TalentSoft Software UNIS related to the improper handling of special characters within SQL queries, potentially allowing for SQL Injection. This issue could allow an attacker to manipulate database queries, potentially leading to unauthorized access, data modification, or disclosure.

Recommendations Update TalentSoft Software UNIS to version 42321 or later.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-12504

Affected Products

Talentsoft Unis

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-12504 · Security Note
• https://twitter.com/CVEnew/status/2000248708525621516 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0435 · Note
• https://twitter.com/cracbot/status/2000158889875239301 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0435 · Note
• https://twitter.com/CveFindCom/status/1998433363401585132 · Twitter Post