Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/12/09 8:26 p.m.2 views

CVE-2025-14089

A vulnerability was identified in Himool ERP up to 2.2. Affected by this issue is the function updateaccount of the file /api/admin/updateaccount/ of the component AdminActionViewSet. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is public...

6.5CVSS6.4AI score0.00039EPSS
Exploits0References1
NVD
NVD
added 2025/12/05 4:15 p.m.2 views

CVE-2025-14089

A vulnerability was identified in Himool ERP up to 2.2. Affected by this issue is the function updateaccount of the file /api/admin/updateaccount/ of the component AdminActionViewSet. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is public...

6.5CVSS0.00039EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/12/05 3:32 p.m.20 views

CVE-2025-14089 Himool ERP AdminActionViewSet update_account improper authorization

A vulnerability was identified in Himool ERP up to 2.2. Affected by this issue is the function updateaccount of the file /api/admin/updateaccount/ of the component AdminActionViewSet. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is public...

6.5CVSS0.00039EPSS
Exploits0References4
EUVD
EUVD
added 2025/12/05 3:32 p.m.2 views

EUVD-2025-201426

A vulnerability was identified in Himool ERP up to 2.2. Affected by this issue is the function updateaccount of the file /api/admin/updateaccount/ of the component AdminActionViewSet. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is public...

6.5CVSS6AI score0.00039EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/12/05 3:32 p.m.2 views

CVE-2025-14089 Himool ERP AdminActionViewSet update_account improper authorization

A vulnerability was identified in Himool ERP up to 2.2. Affected by this issue is the function updateaccount of the file /api/admin/updateaccount/ of the component AdminActionViewSet. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is public...

6.5CVSS6.2AI score0.00039EPSS
Exploits0References4
CVE
CVE
added 2025/12/05 3:32 p.m.6 views

CVE-2025-14089

Himool ERP up to 2.2 contains an improper authorization vulnerability in the AdminActionViewSet function update_account (file path: /api/admin/update_account/). The issue allows remote exploitation with publicly available tooling. Multiple sources (NVD, Red Hat, CVE listings, and others) confirm ...

6.5CVSS6.2AI score0.00039EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.3 views

PT-2025-49250

A vulnerability was identified in Himool ERP up to 2.2. Affected by this issue is the function update account of the file /api/admin/update account/ of the component AdminActionViewSet. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is...

6.5CVSS6.5AI score0.00039EPSS
Exploits0References5
Rows per page
Query Builder