CVE-2025-60357: SQL Injection

Published Jul 17, 2026

Updated

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint.

Affected Software

1 affected component

AhnLab EPP Management=1.0.14.32-6249

Jul 17, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·02:17 PM

DescriptionSeverityWeakness

The severity of CVE-2025-60357 is rated high with a CVSS score of 8.1.

CVE-2025-60357 is categorized as a NoSQL injection vulnerability.

To mitigate CVE-2025-60357, ensure input validation and sanitize user input for the affected endpoint.

CVE-2025-60357 affects AhnLab EPP Management version 1.0.14.32-6249.

CVE-2025-60357 is associated with the eventlog/agentEvent/list endpoint.