The vulnerability is an SQL injection flaw caused by improper neutralization of special characters used in an SQL command. It allows an attacker to inject arbitrary SQL statements into the Sef - AI Chatbot Platform, potentially leading to data exfiltration, unauthorized modifications, or full compromise of database integrity and confidentiality.

HAVELSAN Inc. Sef - AI Chatbot Platform versions prior to 2.1 are vulnerable. The issue was reported on the official security notification site of SIBERGRÜVENLİK. No other vendors or products are listed as affected.

The CVSS score of 8.8 categorizes the vulnerability as high severity. The EPSS score of 0.0043 indicates a very low but non-zero exploitation probability, and the absence of a KEV listing does not diminish the risk; the flaw can likely be exploited remotely by sending crafted input to the chatbot interface. Successful exploitation would give an attacker direct control over the database queries executed by the platform.