CVE-2024-0857
CVE-2024-0857
Título es
CVE-2024-0857
Jue, 18/07/2024 – 18:15
Tipo
CWE-89
Gravedad 2.0 Txt
Pendiente de análisis
Título en
CVE-2024-0857
Descripción en
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software Inc. FlexWater Corporate Water Management allows SQL Injection.This issue affects FlexWater Corporate Water Management: through 18072024.
NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
18/07/2024
18/07/2024
Vector CVSS:3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Gravedad 3.1 (CVSS 3.1 Base Score)
9.80
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
CRITICAL
Referencias
Enviar en el boletín
Off
