Paper/Archive/CVE-2025-14598

CVE-2025-14598

BeeS Software Solutions BET ePortal — CVE-2025-14598

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 53.5.535 × 2010.7 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionality of affected sites. The vulnerability enables arbitrary SQL commands to be executed on the backend database.

Affected

ProductAffectedFixed inSource

BET ePortal< ePortal : Secure Build (October 2025)ePortal : Secure Build (October 2025)CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refcloudilyaerp.com refafnaan.me/cve/cve-2025-14598 refgithub.com/Afnaan-Ahmed/CVE-2025-14598 refkb.cert.org/vuls/id/361400