Filtered by vendor Grupo Castilla Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-12461 1 Grupo Castilla 1 Epsilon Rh 2025-10-30 N/A
This vulnerability allows an attacker to access parts of the application that are not protected by any type of access control. The attacker could access this path ‘…/epsilonnet/License/About.aspx’ and obtain information on both the licence and the configuration of the product by knowing which modules are installed.
CVE-2025-41028 1 Grupo Castilla 1 Epsilon Rh 2025-10-21 N/A
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’.