CVE-2025-0603

critical · 9.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Callvision Healthcare Callvision Emergency Code allows SQL Injection, Blind SQL Injection. This issue affects Callvision Emergency Code: before V3.0.

9.8

CVSS

0.4%

EPSS (exploit prob.)

29th

EPSS percentile

2025-10-07

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-89

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0320
https://www.usom.gov.tr/bildirim/tr-25-0320

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-0603