Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2025-48891

Advantech iView SQL Injection

Description

A vulnerability exists in Advantech iView that could allow for SQL injection through the CUtils.checkSQLInjection() function. This vulnerability can be exploited by an authenticated attacker with at least user-level privileges, potentially leading to information disclosure or a denial-of-service condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Advantech iView

Default version status: unaffected

  • 0 to < 5.7.05 build 7057affected

References