CVE-2025-14598
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionality of affected sites. The vulnerability enables arbitrary SQL commands to be executed on the backend database.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| BeeS Software Solutions | BET ePortal | 0 < ePortal : Secure Build (October 2025) | affected |
Weaknesses
- CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
ADP Enrichment
CVE Program Container
Additional References
CISA ADP Vulnrichment
- SSVC:
- Exploitation: poc
- Automatable: yes
- Technical Impact: total
References
- https://cloudilyaerp.com/
- https://afnaan.me/cve/cve-2025-14598
- https://github.com/Afnaan-Ahmed/CVE-2025-14598
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.