CVE-2024-13955 — SQL Injection 2nd Order

CVE-2024-13955

SQL Injection 2nd Order PUBLISHED

Description (CNA)

2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if administrator credentials become compromised.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

Affected (CNA)

Vendor / product	Versions
ABB / ASPECT-Enterprise	affected 0 through 3.*
ABB / NEXUS Series	affected 0 through 3.*
ABB / MATRIX Series	affected 0 through 3.*

CWE

CWE-89

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.