CVE-2025-2585

Summary

CVE-2025-2585 is a newly identified SQL Injection vulnerability affecting the EBM Maintenance Center from EBM Technologies. This issue allows attackers with regular privileges to inject malicious SQL commands, granting unauthorized access to database contents. With this vulnerability, an adversary can manipulate data, modify configurations, or even delete critical information. The consequences of this exploit can range from data loss and leakage to system compromise. Organizations using this software are advised to apply the necessary patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.