CVE-2025-43923: Unicomsi Focal Point

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in ReportController in Unicom Focal Point 7.6.1. A user who has administrative privilege in Focal Point can perform SQL injection via the image parameter during a delete report image operation.

Affected products

• Unicomsi Focal Point: version 7.6.1 only

Published 2025-06-03. Last modified 2026-06-17.