CVE-2025-14598

critical · 9.8

BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionality of affected sites. The vulnerability enables arbitrary SQL commands to be executed on the backend database.

9.8

CVSS

0.7%

EPSS (exploit prob.)

52nd

EPSS percentile

2026-01-09

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-89

Affected products

Vendor	Product	Affected versions
cloudilyaerp	bet_e-portal	all versions

Check a specific version with /api/v1/cve/match.

References

https://afnaan.me/cve/cve-2025-14598
https://cloudilyaerp.com/
https://github.com/Afnaan-Ahmed/CVE-2025-14598
https://www.kb.cert.org/vuls/id/361400

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-14598