Paper/Archive/CVE-2025-6919

CVE-2025-6919

Cats Information Technology Software Development Technologies Aykome License Tracking System — SQLi in Cats Informatics' Aykome

EPSS 0.4%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 31.4.314 × 206.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cats Information Technology Software Development Technologies Aykome License Tracking System allows SQL Injection. This issue affects Aykome License Tracking System: before Version dated 06.10.2025.

Affected

ProductAffectedFixed inSource

Aykome License Tracking System< Version dated 06.10.2025Version dated 06.10.2025CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-25-0332 refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0332