CVE-2022-42989

CRITICAL 9.0CVE-2022-42989 · Published 22/11/2022 · updated 09/07/2026

In short

CVE-2022-42989 is a CRITICAL (CVSS 9.0) vulnerability affecting sankhya om (sankhya).
Chance of exploitation in the next 30 days (EPSS): 0.90%, higher than 60.0% of all vulnerabilities.
Fix: update to 4.11b81 or later.

Package	Affected versions	Patched versions
sankhya om sankhya	`< 4.11b81`	`4.11b81`

ERP Sankhya before v4.11b81 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Caixa de Entrada.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.