CVE-2025-29529

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

0.30% chance of exploitation in the next 30 days, 22th percentile

Published

2025-04-24

Updated

2025-04-25

Proof-of-concept exploits (1)

• Yoshik0xF6/CVE-2025-295290★ · 2025-04-22

References

• CVE Record
• NVD entry

Related

• CVE-2023-49031
• CVE-2025-29520
• CVE-2025-2953
• CVE-2025-2952
• CVE-2025-2954
• CVE-2025-29519