Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h755-c54r-2xq5

Опубликовано: 15 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.5

Описание

AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST Interface user who had been socially engineered by a miscreant into opening a specially crafted URL.

AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST Interface user who had been socially engineered by a miscreant into opening a specially crafted URL.

EPSS

Процентиль: 50%
0.00274
Низкий

8.5 High

CVSS4

Дефекты

CWE-89

Связанные уязвимости

nvd
больше 1 года назад

AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST Interface user who had been socially engineered by a miscreant into opening a specially crafted URL.

CVSS3: 8.1
fstec
больше 1 года назад

Уязвимость веб-сервера архивации данных AVEVA (Wonderware) Historian, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 50%
0.00274
Низкий

8.5 High

CVSS4

Дефекты

CWE-89