Paper/Archive/CVE-2025-10439

CVE-2025-10439

Yordam Informatics Yordam Library Automation System — SQLi in Yordam Library Automation System

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 29.2.292 × 205.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yordam Informatics Yordam Library Automation System allows SQL Injection. This issue affects Yordam Library Automation System: from 21.5 & 21.6 before 21.7.

Affected

ProductAffectedFixed inSource

Yordam Library Automation System21.5 & 21.6 – < 21.721.7CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-25-0268 refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0268