CVE-2025-57141

The rsbi-os business intelligence software system, version 4.7 , is vulnerable to Remote Code Execution (RCE) . The vulnerability originates from the sqlite-jdbc component and is characterized by an Improper Control of Generation of Code (CWE-94). This flaw allows an attacker to execute arbitrary...

CVE-2025-57140

The business intelligence system rsbi-pom version 4.7 is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. The vulnerability is located in the /bi/service/model/DatasetService path (API endpoint). This flaw could allow an attacker to execute un...