CVE-2024-10864CWE-89

SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication.

High · published May 14, 2025

CVSS v4.0
7.5
EPSS
0%
Percentile
22.0
In the wild
Unconfirmed
What it is

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5

The record
Technical detail
CVSS v4.0
7.5 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:N/U:Green
EPSS
0.00304 · 22.0th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2025-05-14T14:18Z
EPSS history
Timeline
  • 14 MAY 14:18Z
    SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication.
    cvelistv5