CVE-2025-40718: medium-severity vulnerability in Quiter Gateway (Java WAR on Apache Tomcat)
Improper error handling vulnerability in Quiter Gateway
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.4%
Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to send malformed payloads to generate error messages containing sensitive information.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Quiter · Quiter Gateway (Java WAR on Apache Tomcat)Related CVEs — Quiter Gateway (Java WAR on Apache Tomcat)
In the same product, most dangerous first.
CVE-2025-40711CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.6%CVE-2025-40713CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%CVE-2025-40712CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%CVE-2025-40717CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%CVE-2025-40716CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%CVE-2025-40715CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%