CVE-2025-6919 | Improper Neutralization of Special Elements used in an SQL C… | CVSS 9.8 CRITICAL

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cats Information Technology Software Development Technologies Aykome License Tracking System allows SQL Injection. This issue affects Aykome License Tracking System: before Version dated 06.10.2025.

Metadata

CVE ID: CVE-2025-6919
State: PUBLISHED
Assigner: TR-CERT
Reserved: 2025-06-30 08:17 UTC
Published: 2025-10-13 12:46 UTC
Last updated: 2026-06-05 13:59 UTC
Primary CWE: CWE-89
CWE-89 Improper Neutralization of Special Elements used in a…
Vendor / Product: Cats Information Technology Software Development Technologies / Aykome License Tracking System
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
Cats Information Technology Software Development Technologies	Aykome License Tracking System	—	0 < Version dated 06.10.2025

Weakness (CWE)

CWE	Source	Description
CWE-89	cna	CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (2)