CVE-2025-3402

CVE-2025-3402 is a critical SQL injection vulnerability affecting Seeyon Zhiyuan Interconnect FE Collaborative Office Platform version 5.5.2. An unauthenticated attacker can remotely exploit this flaw by manipulating the 'Name' argument within the /sysform/042/check.js%70 file. While the CVSS score is 7.5 (HIGH), indicating potential for high confidentiality impact, the EPSS score is very low, suggesting a minimal likelihood of exploitation in the wild. Despite public disclosure of the exploit, there is no evidence of active exploitation, nor are there readily available exploit modules in common frameworks, and it has garnered no community discussion or media coverage.