CVE-2024-13928CWE-94

Authenticated SQL Injection

High · published May 22, 2025

CVSS v4.0
7.5
EPSS
0%
Percentile
31.7
In the wild
Unconfirmed
What it is

SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if session administrator credentials become compromised.

This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

The record
Technical detail
CVSS v4.0
7.5 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:C
EPSS
0.00388 · 31.7th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2025-05-22T17:51Z
EPSS history
Timeline
  • 22 MAY 17:51Z
    Authenticated SQL Injection
    cvelistv5