Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/12/09 8:26 p.m.•15 views

CVE-2025-14089

A vulnerability was identified in Himool ERP up to 2.2. Affected by this issue is the function updateaccount of the file /api/admin/updateaccount/ of the component AdminActionViewSet. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is public...

6.5CVSS6.4AI score0.00239EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/05 4:15 p.m.•23 views

CVE-2025-14089

A vulnerability was identified in Himool ERP up to 2.2. Affected by this issue is the function updateaccount of the file /api/admin/updateaccount/ of the component AdminActionViewSet. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is public...

6.5CVSS0.00239EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/12/05 3:32 p.m.•49 views

CVE-2025-14089 Himool ERP AdminActionViewSet update_account improper authorization

A vulnerability was identified in Himool ERP up to 2.2. Affected by this issue is the function updateaccount of the file /api/admin/updateaccount/ of the component AdminActionViewSet. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is public...

6.5CVSS0.00239EPSS
SaveExploits0References4
CVE
CVE
•added 2025/12/05 3:32 p.m.•36 views

CVE-2025-14089

Himool ERP up to 2.2 contains an improper authorization vulnerability in the AdminActionViewSet function update_account (file path: /api/admin/update_account/). The issue allows remote exploitation with publicly available tooling. Multiple sources (NVD, Red Hat, CVE listings, and others) confirm ...

6.5CVSS6.1AI score0.00239EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/12/05 3:32 p.m.•18 views

EUVD-2025-201426

A vulnerability was identified in Himool ERP up to 2.2. Affected by this issue is the function updateaccount of the file /api/admin/updateaccount/ of the component AdminActionViewSet. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is public...

6.5CVSS6AI score0.00239EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/12/05 3:32 p.m.•9 views

CVE-2025-14089 Himool ERP AdminActionViewSet update_account improper authorization

A vulnerability was identified in Himool ERP up to 2.2. Affected by this issue is the function updateaccount of the file /api/admin/updateaccount/ of the component AdminActionViewSet. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is public...

6.5CVSS6.1AI score0.00239EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/12/05 12:00 a.m.•24 views

PT-2025-49250

Name of the Vulnerable Software and Affected Versions Himool ERP versions up to 2.2 Description A security issue exists in Himool ERP. This issue involves improper authorization due to manipulation of the update account function within the AdminActionViewSet component. The vulnerable file is...

6.5CVSS6.2AI score0.00239EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/05 12:00 a.m.•6 views

CVE-2025-14089: Improper Authorization

A vulnerability was identified in Himool ERP up to 2.2. Affected by this issue is the function updateaccount of the file /api/admin/updateaccount/ of the component AdminActionViewSet. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is public...

6.5CVSS6.1AI score0.00239EPSS
SaveExploits0References3
Rows per page
Query Builder