PT-2025-35186 · E4 Sistemas · Mercatus Erp

Cadeolog · Published 2025-08-29 · Updated 2025-08-29 · CVE-2025-9619

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions E4 Sistemas Mercatus ERP version 2.00.019

Description A security flaw exists in E4 Sistemas Mercatus ERP 2.00.019, involving improper control of resource identifiers due to manipulation of an unknown function within the /basico/webservice/imprimir-danfe/id/ file. This issue is remotely exploitable. The vendor was contacted regarding this disclosure but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-99

Related Identifiers

CVE-2025-9619

Affected Products

Mercatus Erp

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-9619 · Security Note
• https://t.me/CVEtracker/31215 · Telegram Post
• https://vuldb.com/?id.321790 · Note
• https://twitter.com/VulmonFeeds/status/1961364515632636111 · Twitter Post
• https://twitter.com/CVEnew/status/1961282383283720603 · Twitter Post
• https://t.me/cveNotify/133896 · Telegram Post
• https://vuldb.com/?submit.636623 · Note
• https://vuldb.com/?ctiid.321790 · Note