1. Home
  2. CVE Database
  3. CVE-2025-55703
LOW · 2.5

CVE-2025-55703

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can ...

Vulnerability Description

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, where the API call code was updated to ensure safe handling of input values.

CVSS Score

2.5

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
SunbirddcimPower Iq9.2.0

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2025-55703?

CVE-2025-55703 is a vulnerability with a CVSS score of 2.5 (LOW). An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can ...

How severe is CVE-2025-55703?

CVE-2025-55703 has been rated LOW with a CVSS base score of 2.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-55703?

Check the references section above for vendor advisories and patch information. Affected products include: Sunbirddcim Power Iq.