CVE-2025-59389

Critical

Published: 02/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

An SQL injection vulnerability has been reported in Hyper Data Protector. Remote attackers can exploit it to execute unauthorized code or commands. The vulnerability is fixed in version 2.2.4.1 and later.

Risk Assessment

Attackers can gain unauthorized access to data or take control of the system, leading to serious security breaches.

Recommendation

Upgrade Hyper Data Protector to version 2.2.4.1 or later. Restrict access to the application.

Original NVD description (English source)

An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: Hyper Data Protector 2.2.4.1 and later