CVE-2022-30076: Entab ERP

Medium severity, CVSS 5.3. EPSS: 3.6% chance of exploitation in the next 30 days.

ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting.

Affected products

• Entab ERP: version 1.0 only

Published 2023-04-16. Last modified 2026-06-17.