ZeusQA
Start free

Known exploited vulnerabilities

Advantive vulnerabilities attackers have used

Every Advantive vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 Advantive vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2025-25181, added Mar 10, 2025. VeraCore has the most entries (2).

In KEV, all time
2
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every Advantive entry in CISA KEV

  1. CVE-2025-25181

    Added · due

    Advantive VeraCore SQL Injection Vulnerability

    Advantive VeraCore contains a SQL injection vulnerability in timeoutWarning.asp that allows a remote attacker to execute arbitrary SQL commands via the PmSess1 parameter.

  2. CVE-2024-57968

    Added · due

    Advantive VeraCore Unrestricted File Upload Vulnerability

    Advantive VeraCore contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload files to unintended folders via upload.apsx.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works