CoreCVE
Back

HIGH

SQL Injection in SCATI Vision Web

Published Jul 16, 2025

Description

SQL injection vulnerability in SCATI Vision Web of SCATI Labs from version 4.8 to 7.2. This vulnerability allows an attacker to exfiltrate some data from the database via the ‘login’ parameter in the endpoint ‘/scatevision_web/index.php/loginForm’.

Affected products

Remediation

Vendor solution

The vulnerability has been fixed by the SCATI Vision team in version 7.3.1.0.

Weaknesses (1)

CWE-89

SQL Injection

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner INCIBE
Published Jul 16, 2025
Updated Jul 16, 2025
Reserved Apr 16, 2025
Link CVE-2025-40985
CISA Vulnrichment
Updated Jul 16, 2025
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2025-40985
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-40985