VULNERABILITY INTELLIGENCE

CVE-2025-58462

CVSS score9.8 CRITICAL
EPSS probability0.66%
CISA KEVNot currently listed
Published2025-09-09
Last modified2026-09-30
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could read, write, or delete any content in the underlying database.

Weakness classification

  • 9119a7d8-5eab-497f-8521-727c672e3725: CWE-89

Primary references