VULNERABILITY INTELLIGENCE

CVE-2025-30060

EPSS probability0.22%
CISA KEVNot currently listed
Published2025-08-27
Last modified2026-06-17

Description

In the ReturnUserUnitsXML.pl service, the "getUserInfo" function is vulnerable to SQL injection through the "UserID" parameter.

Weakness classification

  • cvd@cert.pl: CWE-89

Primary references