Security Advisory

CVE-2026-32954

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-03-20 04:30:26

Last updated 2026-03-20 14:27:42

Assigner GitHub_M

CVSS score 7.1

State PUBLISHED

Description

ERP is a free and open source Enterprise Resource Planning tool. In versions prior to 16.8.0 and 15.100.0, certain endpoints were vulnerable to time-based and boolean-based blind SQL injection due to insufficient parameter validation, allowing attackers to infer database information. This issue has been fixed in versions 15.100.0 and 16.8.0.

← Browse all CVEs View on cve.org ↗