Galaxy Software Services Vitals ESP SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability has been identified in Vitals ESP developed by Galaxy Software Services, affecting versions through 6.1. This vulnerability allows authenticated remote attackers to inject arbitrary SQL commands, potentially leading to unauthorized access to database contents.

Impact

Exploitation of this vulnerability could result in unauthorized access to database information, allowing attackers to read sensitive data.

Remediation

Users are advised to contact the vendor for updates.

Added: Dec 8, 2025, 8:21 AM
Updated: Dec 8, 2025, 8:21 AM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
2.5
exploitability
4.9
remediation
7.7
relevance
1.4
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.