CVE-2025-62319
Last modified
CVE-2025-62319 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions (TRUE or FALSE) into application input fields. Instead of returning database errors or visible data, the application responds differently depending on whether the injected condition evaluates to true or false. EPSS estimates a 0.28% chance of exploitation in the next 30 days.
Description
Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions (TRUE or FALSE) into application input fields. Instead of returning database errors or visible data, the application responds differently depending on whether the injected condition evaluates to true or false. This allows an attacker to inject arbitrary SQL into backend configuration queries executed within the application.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hcltech | Unica | < 25.1.1.0.1 |
| Hcltech | Unica Audience Central | < 25.1.1.0.1 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-62319?
How severe is CVE-2025-62319?
How do I fix CVE-2025-62319?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-62310HCL AION is affected by a vulnerability where encryption is …5.4
- CVE-2025-62311HCL AION is affected by a vulnerability where backend servic…4.3
- CVE-2025-62312HCL AION is affected by a vulnerability where basic authoriz…3
- CVE-2025-62313HCL AION is affected by a vulnerability where adequate prote…5.4
- CVE-2025-62316HCL AION is affected by a vulnerability where certain securi…2.3
- CVE-2025-62317HCL AION is affected by a vulnerability where sensitive info…2.6
- CVE-2025-6232An improper validation vulnerability was reported in Lenovo …8.5
- CVE-2025-62320HTML Injection can be carried out in Product when a web appl…6.1
- CVE-2025-62326HCL Digital Experience is susceptible to stored cross-site s…4.8
- CVE-2025-62327In HCL DevOps Deploy 8.1.2.0 through 8.1.2.3, a user with LL…4.9
- CVE-2025-62328HCL Nomad server on Domino did not configure the frame-ances…3.7
- CVE-2025-62329HCL DevOps Deploy / HCL Launch is susceptible to a race cond…5.6
Are you affected by CVE-2025-62319?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST