What’s Vulnerable › Vulnerabilities

CVE-2025-58780

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-05 · updated 2026-06-17
• Weakness: CWE-89

Description

index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. NOTE: this is disputed by the Supplier because it "inaccurately describes the vulnerability."

Affected products

• ScienceLogic SL 1: before 12.1.1 — fixed in 12.1.1

How to fix

Upgrade to a fixed version: ScienceLogic SL 1 12.1.1. Check the vendor advisory for mitigations.

References

• https://docs.sciencelogic.com/release_notes_html/Content/12-1-1/12-1-1_release_notes.htm#New_Features_in_12-1-1
• https://github.com/SexyShoelessGodofWar/CVE-2025-58780

Get alerted when CVE-2025-58780 or the next vulnerability affects your stack