Skip to content
COOEY

EXPOSURES › CVE-2019-25688

CVE-2019-25688

HIGH
DETAIL
SourceNVD · cve Published2026-04-05 CVSS8.2 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-25688 ↗

▸ RECOMMENDED ACTION  Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED
marmotech · vendorkados · product
DESCRIPTION

Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the menu_lev1 parameter. Attackers can send crafted requests with malicious SQL payloads in the menu_lev1 parameter to extract sensitive database information or modify database contents.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.