Security Advisory

CVE-2025-48891

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-10 23:17:45
Last updated 2025-07-11 13:42:37
Assigner icscert
CVSS score not scored
State PUBLISHED

Description

A vulnerability exists in Advantech iView that could allow for SQL injection through the CUtils.checkSQLInjection() function. This vulnerability can be exploited by an authenticated attacker with at least user-level privileges, potentially leading to information disclosure or a denial-of-service condition.