CVE-2025-60357CWE-943

CVE-2025-60357

High · published July 17, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
35.1
In the wild
Unconfirmed
What it is

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00419 · 35.1th percentile
Weakness
CWE-943 · Improper Neutralization of Special Elements in Data Query Logic
Published
2026-07-17T18:17Z
Affected products (1)
ProductVersionsFixed in
ahnlab/epp_managementall versions—
References (3)
https://ahnlab.com · [email protected]https://github.com/Nullbyte3117/CVE-2025-60357 · [email protected]https://github.com/Nullbyte3117/CVE-2025-60357 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 17 JUL 00:00Z
    AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint
    cvelistv5