7.5
Élevée
CVE-2024-13928 SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if session…
Description
SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ASPECT-Enterprise 3.08 | premières → 3.08.03 | Pas de correctif indiqué |
| NEXUS Series 3.08 | premières → 3.08.03 | Pas de correctif indiqué |
| MATRIX Series 3.08 | premières → 3.08.03 | Pas de correctif indiqué |
Autres CVE de ASPECT-Enterprise
Les 58 CVE de ASPECT-Enterprise →
CVE-2024-13945
Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials…
8.4
Élevée
CVE-2024-51552
Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue…
7.1
Élevée
CVE-2024-13958
Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue…
4.6
Moyenne
CVE-2024-13957
SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis…
7.0
Élevée