CVE-2025-15024CWE-94code-injection
CVE-2025-15024
High · published May 14, 2026
What it is
Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion.
This issue affects Library Automation System: from v.19.5 before v.22.1.
The record
Technical detail
- CVSS v3.1
- 8.8 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00246 · 15.0th percentile
- Weakness
- CWE-94 · Improper Control of Generation of Code ('Code Injection')
- Published
- 2026-05-14T22:16Z
References (1)
EPSS history
Timeline