References https://nvd.nist.gov/vuln/detail/CVE-2025-20698 https://www.cve.org/CVERecord?id=CVE-2025-20698 https://access.redhat.com/security/cve/cve-2025-20698 https://www.tenable.com/cve/CVE-2025-20698 https://github.com/advisories/GHSA-5xmj-xwm5-q9qg https://corp.mediatek.com/product-security-bulletin/August-2025 https://avd.aliyun.com/detail?id=AVD-2025-20698 https://cve.imfht.com/detail/CVE-2025-20698 https://www.nsfocus.net/vulndb/130616 https://www.xtcaq.com/nd.jsp?id=9514
Related Vulnerabilities普华科技-PowerPMS系统未授权敏感信息泄露漏洞PowerJob 存在信息泄露漏洞 (CVE-2025-11580)普华PowerPMS系统越权数据泄露漏洞CyberPower /api/v1/ndconfig SQL 注入漏洞 (CVE-2024-32739)PoCPowerJob /server/checkConnectivity 服务器端请求伪造漏洞(CVE-2025-14518)PowerJob /user/list 未授权访问漏洞(CVE-2025-11580)PowerJob /appInfo/assert 默认口令漏洞PoCCVE-2025-11580: PowerJob List - Authorization Bypass上海普华科技PowerPMS /UploadFle/GetFilesData SQL 注入漏洞PoC普华科技-PowerPMS Reg.ashx接口存在SQL注入漏洞PoC普华科技 PowerPMS /PowerPlat/FormXml/DocFile/OfficeService.aspx 文件读取漏洞PoC普华PowerPMS /weixin3.0/Reg.ashx SQL 注入漏洞