CVE-2025-40712: falha crítica em Quiter Gateway (Java WAR on Apache Tomcat)
SQL injection vulnerability in Quiter Gateway
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 0.5%
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the id_concesion parameter in /<Client>FacturaE/DescargarFactura.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Quiter · Quiter Gateway (Java WAR on Apache Tomcat)CVEs relacionadas — Quiter Gateway (Java WAR on Apache Tomcat)
No mesmo produto, das mais perigosas para as menos.
CVE-2025-40711CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.6%CVE-2025-40713CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%CVE-2025-40717CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%CVE-2025-40716CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%CVE-2025-40715CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%CVE-2025-40714CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%