DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Description
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Published:
2026-04-21
Score:
n/a
EPSS:
n/a
KEV:
No
Impact:
n/a
Action:
n/a
Analysis
No data.
No data.
| Vendor | Product | Confidence | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Genesys | Latitude | 90% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
Remediation
No vendor fix or workaround currently provided.
OpenCVE Recommended Actions
- Update Genesys Latitude to a patched version that removes the vulnerable code path
- Apply input validation and use parameterized queries to eliminate unsanitized string concatenation
- Limit the database credentials used by Genesys to only the permissions required for its normal operation
- Ensure network segmentation keeps the database isolated from unauthorized network zones
Generated by OpenCVE AI on April 27, 2026 at 19:54 UTC.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
No reference.
History
Wed, 10 Jun 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-89 | |
| CPEs | ||
| References |
|
|
| Metrics |
cvssV3_1
|
Wed, 10 Jun 2026 20:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A SQL injection vulnerability exists in Genesys Latitude v25.1.0.420 that allows an authenticated attacker to execute arbitrary SQL queries against the backend database. The vulnerability is caused by unsanitized user-supplied input being concatenated directly into SQL statements. | DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. |
Wed, 13 May 2026 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:genesys:latitude:25.1.0.420:*:*:*:*:*:*:* |
Mon, 27 Apr 2026 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | SQL Injection in Genesys Latitude Enabling Arbitrary Database Access |
Wed, 22 Apr 2026 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Wed, 22 Apr 2026 12:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Genesys
Genesys latitude |
|
| Vendors & Products |
Genesys
Genesys latitude |
Wed, 22 Apr 2026 03:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | SQL Injection in Genesys Latitude Enabling Arbitrary Database Access | |
| Weaknesses | CWE-89 |
Wed, 22 Apr 2026 00:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A SQL injection vulnerability exists in Genesys Latitude v25.1.0.420 that allows an authenticated attacker to execute arbitrary SQL queries against the backend database. The vulnerability is caused by unsanitized user-supplied input being concatenated directly into SQL statements. | |
| References |
|
MITRE
Status: REJECTED
Assigner: mitre
Published:
Updated: 2026-06-10T19:49:26.352Z
Reserved: 2026-01-09T00:00:00.000Z
Link: CVE-2025-70420
Vulnrichment
Updated:
NVD
Status : Rejected
Published: 2026-04-21T21:16:22.900
Modified: 2026-06-10T20:16:26.897
Link: CVE-2025-70420
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-04-27T20:00:05Z
Weaknesses
No weakness.