CVE-2025-41028 | Grupo Castilla Epsilon RH 3.03.36.010 POST Request WSAvisos.asmx sEstadoUsr sql injection

A vulnerability identified as critical has been detected in Grupo Castilla Epsilon RH 3.03.36.010. Impacted is an unknown function of the file /epsilonnetws/WSAvisos.asmx of the component POST Request Handler. Performing manipulation of the argument sEstadoUsr results in sql injection.

This vulnerability is reported as CVE-2025-41028. The attack is possible to be carried out remotely. No exploit exists.