{"id":"CVE-2025-6919","state":"PUBLISHED","title":"SQLi in Cats Informatics' Aykome","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cats Information Technology Software Development Technologies Aykome License Tracking System allows SQL Injection.\n\nThis issue affects Aykome License Tracking System: before Version dated 06.10.2025.","publishedAt":"2025-10-13T12:46:11.403Z","updatedAt":"2026-06-05T13:59:40.184Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"TR-CERT"},"assigner":"TR-CERT","products":["Cats Information Technology Software Development Technologies Aykome License Tracking System"],"affected":[{"vendor":"Cats Information Technology Software Development Technologies","product":"Aykome License Tracking System","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Version dated 06.10.2025","versionType":"custom"}]}],"references":["https://www.usom.gov.tr/bildirim/tr-25-0332","https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0332"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T20:10:04.440Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/6xxx/CVE-2025-6919.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-6919","state":"PUBLISHED","datePublished":"2025-10-13T12:46:11.403Z","dateUpdated":"2026-06-05T13:59:40.184Z","assignerShortName":"TR-CERT","assignerOrgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateReserved":"2025-06-30T08:17:34.358Z"},"containers":{"cna":{"title":"SQLi in Cats Informatics' Aykome","descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cats Information Technology Software Development Technologies Aykome License Tracking System allows SQL Injection.\n\nThis issue affects Aykome License Tracking System: before Version dated 06.10.2025."}],"affected":[{"vendor":"Cats Information Technology Software Development Technologies","product":"Aykome License Tracking System","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Version dated 06.10.2025","versionType":"custom"}]}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-25-0332","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0332","tags":["government-resource"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"CRITICAL","baseScore":9.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","lang":"en","description":"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","type":"CWE"}]}],"providerMetadata":{"shortName":"TR-CERT","orgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateUpdated":"2026-06-05T13:59:40.184Z"},"datePublic":"2025-10-13T12:41:00.000Z","impacts":[{"capecId":"CAPEC-66","descriptions":[{"lang":"en","value":"CAPEC-66 SQL Injection"}]}],"credits":[{"lang":"en","value":"Hasan Yasin Yasar","type":"finder"},{"lang":"en","value":"Yusuf Melih Daskiran","type":"analyst"}],"source":{"defect":["TR-25-0332"],"advisory":"TR-25-0332","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-10-21T19:52:51.606185Z","id":"CVE-2025-6919","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-21T19:53:01.085Z"}}]}}}