CVEvulnerability
CVE-2024-0857
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2024-07-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-89
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software Inc. FlexWater Corporate Water Management allows SQL Injection.
This issue affects FlexWater Corporate Water Management: before 5.452.0.
Affected configurations
• uni-yaz flexwater corporate water management (< 5.452.0)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1011 siberguvenlik.gov.tr
- https://www.usom.gov.tr/bildirim/tr-24-1011 Third Party Advisory
- https://www.usom.gov.tr/bildirim/tr-24-1011 Third Party Advisory