CVE Intelligence

Nedatec Consulting vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Nedatec Consulting products: 1 record(s), with severity, exploitation and fixes.

Prevengos 1

Exploited only (KEV) →

CVE-2025-40698 High · 8.7 CWE-89 Sep 25, 2025
SQL injection vulnerability in Prevengos
SQL injection vulnerability in Prevengos v2.44 by Nedatec Consulting. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameters “mpsCentroin”, “mpsEmpresa”, “mpsProyecto”, and “mpsContrata” in “/servicios/autorizaciones.asmx/mfsRecuperarListado”.