Beveiligingsadvies

CVE-2025-41013

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-02 13:13:57
Laatst bijgewerkt 2025-12-02 14:22:40
Toegewezen door INCIBE
CVSS-score 8.7
Status PUBLISHED

Beschrijving

SQL injection vulnerability in TCMAN GIM v11 in version 20250304. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a GET request using the 'idmant' parameter in '/PC/frmEPIS.aspx'.