CVE-2025-70981

Published: Feb 12, 2026

Modified: Feb 12, 2026

PUBLISHED

CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds parameter.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.