CVE-2020-37082: Weberp

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

webERP 4.15.1 contains an unauthenticated file access vulnerability that allows remote attackers to download database backup files without authentication. Attackers can directly access generated backup files in the companies/weberp/ directory by requesting the Backup_[timestamp].sql.gz file.

Affected products

• Weberp Weberp: version 4.15.1 only

Published 2026-02-03. Last modified 2026-10-07.