MEIFP – Most Exploited Internet-Facing Products

Advantive

Products: VeraCore

67.0

Score

CVEs

Active

PoC

KEV

#38

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2024-57968	2025-02-03	9.9v3.1	ACTIVE		Low	Low	no	26.4	VeraCore	Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). upload.aspx can be used for this.
CVE-2025-25181	2025-02-03	5.8v3.1	ACTIVE		Low	None	YES	40.6	VeraCore	A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands via the PmSess1 parameter.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3