Skip to content
OpenAdvisories

Vendor

BEIMS

1 known vulnerabilities.

Products

Contractor Web 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2025-10460

    Unsanitized parameter input leading to SQL Injection vulnerability

    A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor, allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerabili…

    BEIMS Contractor Web