VULNERABILITY INTELLIGENCE

CVE-2025-10968

CVSS score8.8 HIGH

EPSS probability0.32%

CISA KEVNot currently listed

Published2025-11-07

Last modified2026-10-07

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in GG Soft Software Services Inc. PaperWork allows Blind SQL Injection, SQL Injection. This issue affects PaperWork: from 6.1.0.9390 before 6.1.0.9398.