CVE-2025-40620 — Multiple vulnerabilities in TCMAN's GIM

CVE-2025-40620

Multiple vulnerabilities in TCMAN's GIM PUBLISHED

Description (CNA)

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘User’ parameter of the ‘ValidateUserAndWS’ endpoint.

Affected (CNA)

Vendor / product	Versions
TCMAN / GIM	affected v11

CWE

CWE-89

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tcmans-gim

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.