CVE-2025-58439 – ERP: Possibility of SQL injection due to missing validation

CVE ID : CVE-2025-58439

Published : Sept. 6, 2025, 12:30 a.m. | 47 minutes ago

Description : ERP is a free and open source Enterprise Resource Planning tool. In versions below 14.89.2 and 15.0.0 through 15.75.1, lack of validation of parameters left certain endpoints vulnerable to error-based SQL Injection. Some information like version could be retrieved. This issue is fixed in versions 14.89.2 and 15.76.0.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…