CVE-2025-30062CWE-89

SQL injection in CheckUnitCodeAndKey.pl

Medium · published March 2, 2026

CVSS v4.0

6.9

EPSS

Percentile

8.0

In the wild

Unconfirmed

What it is

In the "CheckUnitCodeAndKey.pl" service, the "validateOrgUnit" function is vulnerable to SQL injection.

The record

Technical detail

CVSS v4.0: 6.9 · MEDIUM
Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS: 0.00189 · 8.0th percentile
Weakness: CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published: 2026-03-02T11:16Z

EPSS history

Timeline