Threats Tagged 'cve-2025-41013'
View all threats tagged with 'cve-2025-41013'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-41013'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-41013 is a high-severity SQL injection vulnerability affecting TCMAN GIM v11 (version 20250304). It allows unauthenticated remote attackers with low privileges to manipulate the database by exploiting the 'idmant' parameter in the '/PC/frmEPIS.aspx' endpoint via a crafted GET request. The vulnerability enables attackers to retrieve, create, update, and delete database records, severely impacting confidentiality, integrity, and availability. No known exploits are currently in the wild, but the ease of exploitation and potential damage warrant immediate attention. European organizations using TCMAN GIM should prioritize patching or applying mitigations. Countries with significant TCMAN GIM deployments or critical infrastructure relying on this product are at higher risk. Mitigation includes strict input validation, parameterized queries, and monitoring for suspicious requests targeting the vulnerable parameter. Given the CVSS 8.7 score, this vulnerability is classified as high severity and requires prompt remediation to prevent exploitation. Join the discussion | CVE Database V5 | 12/02/2025, 13:13:57 UTC Added: 12/02/2025, 13:43:15 UTC |
Showing 1 to 1 of 1 result