Security Advisory

CVE-2025-58462

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-09-09 21:09:48

Last updated 2026-02-26 17:48:47

Assigner cisa-cg

State PUBLISHED

Description

OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could read, write, or delete any content in the underlying database.

← Browse all CVEs View on cve.org ↗