CVE-2025-10460

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10460", "assignerOrgId": "9c1820ae-fb77-4810-a8aa-ca46e7474d2f", "state": "PUBLISHED", "assignerShortName": "MON-CSIRT", "dateReserved": "2025-09-15T05:46:32.298Z", "datePublished": "2025-11-17T02:48:25.684Z", "dateUpdated": "2025-11-17T16:42:22.769Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "Contractor Web", "vendor": "BEIMS", "versions": [{"status": "affected", "version": "5.7"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "Nicholas Page"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p><span style=\"background-color: transparent;\">A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor,&nbsp;allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerability occurs due to improper input validation on /BEIMSWeb/contractor.asp endpoint and successful exploitation requires a contractor.asp endpoint open to the internet. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity and potentially the availability of the database.&nbsp;</span></p><p><span style=\"background-color: transparent;\">\n\n\n\nVersion 5.7.139\n\n&nbsp;has been confirmed as vulnerable. Other versions have not been confirmed by the vendor and users should assume that all versions of BEIMS Contractor Web may be impacted until further guidance is provided by the vendor.<b>&nbsp;</b>&nbsp;</span></p><br>"}], "value": "A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor,\u00a0allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerability occurs due to improper input validation on /BEIMSWeb/contractor.asp endpoint and successful exploitation requires a contractor.asp endpoint open to the internet. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity and potentially the availability of the database.\u00a0\n\n\n\n\n\nVersion 5.7.139\n\n\u00a0has been confirmed as vulnerable. Other versions have not been confirmed by the vendor and users should assume that all versions of BEIMS Contractor Web may be impacted until further guidance is provided by the vendor."}], "impacts": [{"capecId": "CAPEC-66", "descriptions": [{"lang": "en", "value": "CAPEC-66 SQL Injection"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "baseScore": 9.4, "baseSeverity": "CRITICAL", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:L/SA:N", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9c1820ae-fb77-4810-a8aa-ca46e7474d2f", "shortName": "MON-CSIRT", "dateUpdated": "2025-11-17T02:48:25.684Z"}, "references": [{"url": "https://help.fmiworks.com/knowledge/beims-web"}, {"url": "https://help.fmiworks.com/knowledge/contractor-web-operational-requirements"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Users are advised to mitigate risk by restricting access to the affected endpoint or upgrading to a supported alternative. </span>\n\n<br>"}], "value": "Users are advised to mitigate risk by restricting access to the affected endpoint or upgrading to a supported alternative."}], "source": {"discovery": "INTERNAL"}, "title": "Unsanitized parameter input leading to SQL Injection vulnerability", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Vendor recommendations:<br><ul><li>Restrict access to your private intranet only</li><li>Implement a Web Application Firewall (WAF) to block malicious files</li><li>Consider using File Server Resource Manager with IIS to monitor file activity at the OS level</li></ul>"}], "value": "Vendor recommendations:\n * Restrict access to your private intranet only\n * Implement a Web Application Firewall (WAF) to block malicious files\n * Consider using File Server Resource Manager with IIS to monitor file activity at the OS level"}], "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-17T16:42:03.168458Z", "id": "CVE-2025-10460", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-17T16:42:22.769Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10460", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-17T16:42:03.168458Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-17T16:42:07.420Z"}}], "cna": {"title": "Unsanitized parameter input leading to SQL Injection vulnerability", "source": {"discovery": "INTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "value": "Nicholas Page"}], "impacts": [{"capecId": "CAPEC-66", "descriptions": [{"lang": "en", "value": "CAPEC-66 SQL Injection"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.4, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:L/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "BEIMS", "product": "Contractor Web", "versions": [{"status": "affected", "version": "5.7"}], "defaultStatus": "affected"}], "solutions": [{"lang": "en", "value": "Users are advised to mitigate risk by restricting access to the affected endpoint or upgrading to a supported alternative.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Users are advised to mitigate risk by restricting access to the affected endpoint or upgrading to a supported alternative. </span>\n\n<br>", "base64": false}]}], "references": [{"url": "https://help.fmiworks.com/knowledge/beims-web"}, {"url": "https://help.fmiworks.com/knowledge/contractor-web-operational-requirements"}], "workarounds": [{"lang": "en", "value": "Vendor recommendations:\n * Restrict access to your private intranet only\n * Implement a Web Application Firewall (WAF) to block malicious files\n * Consider using File Server Resource Manager with IIS to monitor file activity at the OS level", "supportingMedia": [{"type": "text/html", "value": "Vendor recommendations:<br><ul><li>Restrict access to your private intranet only</li><li>Implement a Web Application Firewall (WAF) to block malicious files</li><li>Consider using File Server Resource Manager with IIS to monitor file activity at the OS level</li></ul>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor,\u00a0allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerability occurs due to improper input validation on /BEIMSWeb/contractor.asp endpoint and successful exploitation requires a contractor.asp endpoint open to the internet. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity and potentially the availability of the database.\u00a0\n\n\n\n\n\nVersion 5.7.139\n\n\u00a0has been confirmed as vulnerable. Other versions have not been confirmed by the vendor and users should assume that all versions of BEIMS Contractor Web may be impacted until further guidance is provided by the vendor.", "supportingMedia": [{"type": "text/html", "value": "<p><span style=\"background-color: transparent;\">A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor,&nbsp;allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerability occurs due to improper input validation on /BEIMSWeb/contractor.asp endpoint and successful exploitation requires a contractor.asp endpoint open to the internet. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity and potentially the availability of the database.&nbsp;</span></p><p><span style=\"background-color: transparent;\">\n\n\n\nVersion 5.7.139\n\n&nbsp;has been confirmed as vulnerable. Other versions have not been confirmed by the vendor and users should assume that all versions of BEIMS Contractor Web may be impacted until further guidance is provided by the vendor.<b>&nbsp;</b>&nbsp;</span></p><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "9c1820ae-fb77-4810-a8aa-ca46e7474d2f", "shortName": "MON-CSIRT", "dateUpdated": "2025-11-17T02:48:25.684Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10460", "state": "PUBLISHED", "dateUpdated": "2025-11-17T16:42:22.769Z", "dateReserved": "2025-09-15T05:46:32.298Z", "assignerOrgId": "9c1820ae-fb77-4810-a8aa-ca46e7474d2f", "datePublished": "2025-11-17T02:48:25.684Z", "assignerShortName": "MON-CSIRT"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "Contractor Web", "vendor": "BEIMS", "versions": [{"status": "affected", "version": "5.7"}]}], "source": "9c1820ae-fb77-4810-a8aa-ca46e7474d2f"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor,\u00a0allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerability occurs due to improper input validation on /BEIMSWeb/contractor.asp endpoint and successful exploitation requires a contractor.asp endpoint open to the internet. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity and potentially the availability of the database.\u00a0\n\n\n\n\n\nVersion 5.7.139\n\n\u00a0has been confirmed as vulnerable. Other versions have not been confirmed by the vendor and users should assume that all versions of BEIMS Contractor Web may be impacted until further guidance is provided by the vendor."}, {"lang": "es", "value": "Una vulnerabilidad de inyecci\u00f3n SQL en un endpoint en BEIMS Contractor Web, un producto heredado que ya no es mantenido ni parcheado por el proveedor, permite a un usuario no autorizado recuperar contenido sensible de la base de datos a trav\u00e9s de la entrada de par\u00e1metros no saneada. Esta vulnerabilidad ocurre debido a una validaci\u00f3n de entrada incorrecta en el endpoint /BEIMSWeb/contractor.asp y la explotaci\u00f3n exitosa requiere un endpoint contractor.asp abierto a internet. Esta vulnerabilidad permite a los atacantes ejecutar comandos SQL arbitrarios, comprometiendo la confidencialidad, integridad y potencialmente la disponibilidad de la base de datos.\n\nLa versi\u00f3n 5.7.139 ha sido confirmada como vulnerable. Otras versiones no han sido confirmadas por el proveedor y los usuarios deben asumir que todas las versiones de BEIMS Contractor Web pueden verse afectadas hasta que el proveedor proporcione m\u00e1s orientaci\u00f3n."}], "id": "CVE-2025-10460", "lastModified": "2026-10-18T20:10:00.110", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.4, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "9c1820ae-fb77-4810-a8aa-ca46e7474d2f", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10460", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-11-17T16:42:03.168458Z", "version": "2.0.3"}}]}, "published": "2025-11-17T03:15:55.170", "references": [{"source": "9c1820ae-fb77-4810-a8aa-ca46e7474d2f", "url": "https://help.fmiworks.com/knowledge/beims-web"}, {"source": "9c1820ae-fb77-4810-a8aa-ca46e7474d2f", "url": "https://help.fmiworks.com/knowledge/contractor-web-operational-requirements"}], "sourceIdentifier": "9c1820ae-fb77-4810-a8aa-ca46e7474d2f", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "9c1820ae-fb77-4810-a8aa-ca46e7474d2f", "type": "Secondary"}]}

{}

{"created": "2025-11-17T10:09:20.316833+00:00", "updated": "2025-11-17T10:09:20.316871+00:00", "vendors": ["beims", "beims$PRODUCT$contractorweb.net"]}