exploitDog

CVE-2020-13505

Опубликовано: 24 сент. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability.

Ссылки

https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108
Exploit
Technical Description
Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108
Exploit
Technical Description
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:aveva:edna_enterprise_data_historian:3.0.1.2\/7.5.4989.33053:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00453

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-w944-cr63-4f5x

github

больше 3 лет назад

Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability.

EPSS

Процентиль: 63%

0.00453

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89