Beveiligingsadvies

CVE-2026-1198

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-26 11:27:18
Laatst bijgewerkt 2026-02-26 14:27:02
Toegewezen door CERT-PL
CVSS-score 8.6
Status PUBLISHED

Beschrijving

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in 6.30@A04.4_u06.