Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2024-13955

SQL Injection 2nd Order

Description

2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if administrator credentials become compromised.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ABB ASPECT-Enterprise

Default version status: affected

  • 0 to ≤ 3.*affected

ABB NEXUS Series

Default version status: unaffected

  • 0 to ≤ 3.*affected

ABB MATRIX Series

Default version status: unaffected

  • 0 to ≤ 3.*affected

References