Beveiligingsadvies

CVE-2024-44903

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-25 00:00:00

Laatst bijgewerkt 2025-03-25 13:23:08

Toegewezen door mitre

CVSS-score 7.5

Status PUBLISHED

Beschrijving

SQL Injection can occur in the SirsiDynix Horizon Information Portal (IPAC20) through 3.25_9382; however, a patch is available from the vendor. This is in ipac.jsp in a SELECT WHERE statement, in a part of the uri= variable in the second part of the full= inner variable.

← Alle CVE's bekijken Bekijk op cve.org ↗