CVE-2025-49853: SQL Injection in iDSecure On-premises

The SQL Injection vulnerability in iDSecure On-premises presents a significant risk. Successful exploitation could allow an attacker to bypass authentication mechanisms, access sensitive data stored in the database (such as user credentials, configuration details, or proprietary information), and even modify or delete data. Depending on the database permissions, an attacker might be able to gain control of the underlying server, enabling lateral movement within the network. The impact is particularly severe given the potential for data exfiltration and disruption of critical business processes.

1. Reserved2025-06-11
2. Published2025-06-24
3. Modified2025-06-27
4. EPSS updated2026-03-23

The primary mitigation for CVE-2025-49853 is to upgrade to iDSecure On-premises version 4.7.49 or later. If immediate upgrading is not possible, consider implementing temporary workarounds such as input validation and parameterized queries at the application level. While not a complete solution, these measures can reduce the attack surface. Monitor database logs for suspicious SQL queries that might indicate an attempted exploitation. Implement a Web Application Firewall (WAF) with SQL Injection protection rules to filter malicious requests.