PatchTheCVEweberp vulnerabilities and fixes
Recent CVEs affecting weberp, with upgrade or downgrade steps. 3 tracked.
weberp has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-02-03. Highest priority: CVE-2020-37082 (score 60/100).
- CVE-2020-37082 CRITICAL 9.8 DOWNGRADE webERP 4.15.1 contains an unauthenticated file access vulnerability that allows remote attackers to download d
- CVE-2025-46053 MEDIUM 5.1 DOWNGRADE A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract
- CVE-2025-46052 CRITICAL 9.8 DOWNGRADE An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL
FAQ
How do I fix weberp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is weberp being exploited right now?
None of the tracked weberp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which weberp CVE should I patch first?
CVE-2020-37082 currently ranks highest (60/100): webERP 4.15.1 contains an unauthenticated file access vulnerability that allows remote attackers to download d.