{"id":"CVE-2025-59816","state":"PUBLISHED","title":"Authenticated Union based SQL-injection in the search input field","description":"This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials. User passwords are stored in plaintext, significantly increasing the severity of this issue.","publishedAt":"2025-09-25T19:30:03.608Z","updatedAt":"2025-09-26T15:42:38.822Z","severity":{"score":7.3,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","source":"NCSC-NL"},"assigner":"NCSC-NL","products":["Zenitel ICX500","Zenitel ICX510"],"affected":[{"vendor":"Zenitel","product":"ICX500","defaultStatus":"unaffected","versions":[{"version":"<1.4.3.3","status":"affected","versionType":"custom"}]},{"vendor":"Zenitel","product":"ICX510","defaultStatus":"unaffected","versions":[{"version":"<1.4.3.3","status":"affected","versionType":"custom"}]}],"references":["https://wiki.zenitel.com/wiki/ICX_1.4.3.X_-_Release_Notes","https://wiki.zenitel.com/wiki/Downloads#ICX-AlphaCom_System"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T20:09:39.787Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/59xxx/CVE-2025-59816.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-59816","state":"PUBLISHED","datePublished":"2025-09-25T19:30:03.608Z","dateUpdated":"2025-09-26T15:42:38.822Z","assignerShortName":"NCSC-NL","assignerOrgId":"cf4a7ff5-dd38-4ede-a530-ffaa7ea59c39","dateReserved":"2025-09-22T10:23:28.574Z"},"containers":{"cna":{"title":"Authenticated Union based SQL-injection in the search input field","descriptions":[{"lang":"en","value":"This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials. User passwords are stored in plaintext, significantly increasing the severity of this issue."}],"affected":[{"vendor":"Zenitel","product":"ICX500","defaultStatus":"unaffected","versions":[{"version":"<1.4.3.3","status":"affected","versionType":"custom"}]},{"vendor":"Zenitel","product":"ICX510","defaultStatus":"unaffected","versions":[{"version":"<1.4.3.3","status":"affected","versionType":"custom"}]}],"references":[{"url":"https://wiki.zenitel.com/wiki/ICX_1.4.3.X_-_Release_Notes","name":"Zenitel","tags":["release-notes"]},{"url":"https://wiki.zenitel.com/wiki/Downloads#ICX-AlphaCom_System","name":"Zenitel","tags":["patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.3,"baseSeverity":"HIGH","exploitCodeMaturity":"NOT_DEFINED","remediationLevel":"NOT_DEFINED","reportConfidence":"NOT_DEFINED","temporalScore":7.3,"temporalSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"ADJACENT_NETWORK","modifiedAttackComplexity":"LOW","modifiedPrivilegesRequired":"LOW","modifiedUserInteraction":"NONE","modifiedScope":"UNCHANGED","modifiedConfidentialityImpact":"HIGH","modifiedIntegrityImpact":"HIGH","modifiedAvailabilityImpact":"NONE","environmentalScore":7.3,"environmentalSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","lang":"en","description":"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","type":"CWE"}]}],"providerMetadata":{"shortName":"NCSC-NL","orgId":"cf4a7ff5-dd38-4ede-a530-ffaa7ea59c39","dateUpdated":"2025-09-26T05:47:09.538Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-09-26T15:42:26.536306Z","id":"CVE-2025-59816","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-09-26T15:42:38.822Z"}}]}}}