Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

EBM Maintenance Center Allows Malicious SQL Code Execution

CVE-2025-2585 · published 1 year ago
Summary

A security issue in EBM Maintenance Center allows hackers to inject malicious code into the database, potentially stealing or altering sensitive data. This could happen even if the attacker doesn't have special permissions. To stay safe, update to the latest version of EBM Maintenance Center as soon as possible.

Original advisory text
EBM Maintenance Center From EBM Technologies has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete databa...
EBM Maintenance Center From EBM Technologies has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published21 Mar 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-2585 · NVD
Track software like this
Free during beta