CVE-2025-34141

ETQ Reliance CG < SE.2025.1 Reflected XSS in `SQLConverterServlet`

5.1 Medium

A reflected cross-site scripting (XSS) vulnerability exists in ETQ Reliance CG (legacy) platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The affected servlet was unnecessarily exposed to authenticated users and has since been disabled in version SE.2025.1.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Active

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: None

Exploit likelihood

2.09%Up 2.0 points since Jul 23, 2025

What each source reports

CVE List Score used 5.1

ETQ Reliance CG < SE.2025.1 Reflected XSS in `SQLConverterServlet`

Record: CVE-2025-34141
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Weakness: CWE-79, CWE-116
Updated: 2026-11-02

EUVDEUVD-2025-22314 5.1

Record: EUVD-2025-22314
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-wffg-jjj6-c47h 5.1

A reflected cross-site scripting (XSS) vulnerability exists in ETQ Reliance CG (legacy) platform...

Record: GHSA-wffg-jjj6-c47h
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness: CWE-79
Updated: 2026-11-02

NVD 5.1

Record: CVE-2025-34141
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness: CWE-79, CWE-116
Updated: 2026-11-02

Affected products

etq reliance cg (legacy)

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Nuclei	ETQ Reliance - Reflected XSS via SQLConverterServlet

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, Nuclei, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-34141 is a medium vulnerability (CVSS 5.1) in Etq Reliance Cg (legacy), published July 22, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.09%, the 81st percentile. No source names a fixed version.