Epsilon RH vulnerabilities

1 known vulnerability in Epsilon RH from Grupo Castilla. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Epsilon RH: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-41028Oct 20, 2025Grupo Castilla

  A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’.