8.4Alta
CVE-2025-68394SQL Injection in Protectel
Descripción
ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization of input provided by a low privileged user into "profilInput" parameter allows for SQL Injection attacks. This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67
Debilidad (CWE):
CWE-89
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| ARKETEAM | BDF | < 6.4.67 | |
| ARKETEAM | PROTECTELMAJ | < 6.5.19 |
Referencias y parches
- https://protectel.arketeam.com/ product
- https://cert.pl/en/posts/2026/10/CVE-2025-68391 third-party-advisory