An issue pertaining to CWE-89: Improper Neutralization of Special Elements used in an SQL Command was discovered in Benkeen Generatedata 4.0.14. The vulnerability allows attackers to inject arbitrary SQL statements, potentially leading to unauthorized data access, modification, or deletion. This can compromise data confidentiality and integrity across the affected system.

The affected system is Benkeen Generatedata version 4.0.14. No other vendor or product versions have been identified in the CVE record.

The CVSS score of 9.8 classifies this flaw as critical. Despite a very low EPSS probability (<1%) and absence from the CISA KEV listing, the potential for exploitation remains significant if an attacker can supply unsanitized input to the application. The vulnerability likely requires user‑provided input to generate the vulnerable SQL command, and could be exposed through any publicly accessible endpoint that constructs SQL queries without proper parameterization.