Description (CNA)
Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Subnet Solutions / PowerSYSTEM Center 2024 | affected 6.0.x through 6.2.x; unaffected PowerSYSTEM Center 2026 Update 1.1 |
| Subnet Solutions / PowerSYSTEM Center 2026 | affected 7.0.x through 7.1.x; unaffected Update 1.1 |
CWE
CWE-89