Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

ScienceLogic SL1 index.em7 allows unauthorized database access

CVE-2025-58780 · published 1 year ago
Summary

A security weakness in ScienceLogic SL1's index.em7 could allow an attacker to execute unauthorized database queries, potentially leading to sensitive data exposure. This issue affects the way the software handles certain user input. To protect your system, update to version 12.1.1 or later, or apply a patch provided by the supplier.

Original advisory text
index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. NOTE: this is disputed by the Supplier because it "inaccurately describes the vulnerability."
index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. NOTE: this is disputed by the Supplier because it "inaccurately describes the vulnerability."
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.2 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published5 Sep 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-58780 · NVD
Track software like this
Free during beta