Security Advisory

CVE-2025-41028

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-20 09:00:59

Last updated 2025-10-20 12:42:02

Assigner INCIBE

State PUBLISHED

Description

A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’.

← Browse all CVEs View on cve.org ↗