CVE-2025-25181 is an Advantive VeraCore SQL injection vulnerability that CISA added to its Known Exploited Vulnerabilities catalog on 2025-03-10. Because it is listed in KEV, defenders should treat it as a high-priority remediation item, review vendor guidance, and verify that mitigations are in place before the 2025-03-31 due date.
CVE-2024-57968 is an Advantive VeraCore unrestricted file upload vulnerability that CISA added to the Known Exploited Vulnerabilities catalog on 2025-03-10 with a remediation due date of 2025-03-31. Because it is in KEV, organizations using VeraCore should treat it as a priority exposure even though the supplied corpus does not include CVSS or a detailed vendor technical advisory.