The vulnerability CVE-2025-22523 affects the scheduler Schedule product (versions up to 1.0.0) and is caused by improper neutralization of special elements in SQL commands, leading to Blind SQL Injection. This allows an unauthenticated attacker to remotely exploit the system over the network with low complexity, potentially leading to unauthorized disclosure of sensitive information. The vulnerability does not affect data integrity but can impact confidentiality and availability to a limited extent. No official patch or fix has been provided or referenced in the available data.

Successful exploitation of this vulnerability could allow an attacker to perform Blind SQL Injection attacks remotely without authentication, potentially leading to unauthorized disclosure of sensitive data (high confidentiality impact). The vulnerability does not affect data integrity but may cause limited availability impact. There are no known active exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying any recommended temporary mitigations from the vendor or restrict network access to the affected service to trusted users only. Monitor vendor channels for updates regarding patches or official mitigations.