CVE-2024-7837: Firmanet ERP

High severity, CVSS 8.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Firmanet Software ERP allows SQL Injection. This issue affects ERP: before 15.0.1.

Affected products

• Firmanet ERP: up to and including 22.11.2024
• Firmanet Software ERP: before 15.0.1 (fixed in 15.0.1)

Published 2024-11-22. Last modified 2026-09-04.