CVE-2024-10864 — SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication.

CVE-2024-10864

SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication. PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5

Affected (CNA)

Vendor / product	Versions
OpenText / Advance Authentication	affected 6.5 before <

CWE

CWE-89

References

https://www.netiq.com/documentation/advanced-authentication-65/advanced-authentication-releasenotes-6.5/data/advanced-authentication-releasenotes-6.5.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.