VULNERABILITY INTELLIGENCE
CVE-2025-41028
EPSS probability0.47%
CISA KEVNot currently listed
Published2025-10-20
Last modified2026-10-08
Description
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’.
Weakness classification
- cve-coordination@incibe.es: CWE-89