Back to Database
Status published
Critical
CVE-2025-40715
SQL injection vulnerability in Quiter Gateway
Vulnerability Description
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo mensaje in /QISClient/api/v1/sucesospaginas.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-40715
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- David Carrión Poza
References
More from Quiter
View All →CVE-2025-40721
Reflected Cross-site Scripting (XSS) vulnerability in Quiter Gateway
Medium
5.1
CVE-2025-40720
Reflected Cross-site Scripting (XSS) vulnerability in Quiter Gateway
Medium
5.1
CVE-2025-40719
Reflected Cross-site Scripting (XSS) vulnerability in Quiter Gateway
Medium
5.1
CVE-2025-40718
Improper error handling vulnerability in Quiter Gateway
Medium
6.9
CVE-2025-40717
SQL injection vulnerability in Quiter Gateway
Critical
9.3
Affected Vendor
Quiter
View all reports →Affected Software
Quiter Gateway (Java WAR on Apache Tomcat)
Vulnerable Versions:
0
Timeline
Official Publish:
July 8th, 2025
Last Modified:
July 10th, 2025
Added to House:
July 22nd, 2026