{"id":"CVE-2025-34141","state":"PUBLISHED","title":"ETQ Reliance CG < SE.2025.1 Reflected XSS in `SQLConverterServlet`","description":"A reflected cross-site scripting (XSS) vulnerability exists in ETQ Reliance CG (legacy) platform within the `SQLConverterServlet` component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The affected servlet was unnecessarily exposed to authenticated users and has since been disabled in version SE.2025.1.","publishedAt":"2025-07-22T12:35:57.509Z","updatedAt":"2026-05-15T11:14:52.106Z","severity":{"score":5.1,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["ETQ Reliance CG (legacy)"],"affected":[{"vendor":"ETQ","product":"Reliance CG (legacy)","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"SE.2025.1","versionType":"custom"}],"modules":["SQLConverterServlet"]}],"references":["https://www.etq.com/product-overview/","https://www.etq.com/blog/etq-reliance-security-update/","https://slcyber.io/assetnote-security-research-center/how-we-accidentally-discovered-a-remote-code-execution-vulnerability-in-etq-reliance/","https://www.vulncheck.com/advisories/etq-reliance-cg-reflected-xss-in-sqlconverterservlet"],"weaknesses":["CWE-79","CWE-116"],"ingestedAt":"2026-10-29T20:09:03.054Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/34xxx/CVE-2025-34141.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-34141","state":"PUBLISHED","datePublished":"2025-07-22T12:35:57.509Z","dateUpdated":"2026-05-15T11:14:52.106Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2025-04-15T19:15:22.563Z"},"containers":{"cna":{"title":"ETQ Reliance CG < SE.2025.1 Reflected XSS in `SQLConverterServlet`","descriptions":[{"lang":"en","value":"A reflected cross-site scripting (XSS) vulnerability exists in ETQ Reliance CG (legacy) platform within the `SQLConverterServlet` component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The affected servlet was unnecessarily exposed to authenticated users and has since been disabled in version SE.2025.1."}],"affected":[{"vendor":"ETQ","product":"Reliance CG (legacy)","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"SE.2025.1","versionType":"custom"}],"modules":["SQLConverterServlet"]}],"references":[{"url":"https://www.etq.com/product-overview/","tags":["product"]},{"url":"https://www.etq.com/blog/etq-reliance-security-update/","tags":["vendor-advisory","patch"]},{"url":"https://slcyber.io/assetnote-security-research-center/how-we-accidentally-discovered-a-remote-code-execution-vulnerability-in-etq-reliance/","tags":["technical-description"]},{"url":"https://www.vulncheck.com/advisories/etq-reliance-cg-reflected-xss-in-sqlconverterservlet","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":5.1,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","description":"CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-116","description":"CWE-116 Improper Encoding or Escaping of Output","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-05-15T11:14:52.106Z"},"credits":[{"lang":"en","type":"finder","value":"Adam Kues and Shubham Shah of Assetnote"}],"impacts":[{"capecId":"CAPEC-63","descriptions":[{"lang":"en","value":"CAPEC-63 Cross-Site Scripting (XSS)"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-07-22T13:19:33.282131Z","id":"CVE-2025-34141","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-07-22T13:21:50.982Z"}}]}}}