CVE-2024-41980CWE-311

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506)…

Low · published August 12, 2025

CVSS v4.0
2.0
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application do not encrypt the communication in LDAP interface by default. This could allow an authenticated attacker to gain unauthorized access to sensitive information.

The record
Technical detail
CVSS v4.0
2.0 · LOW
Vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00122 · 1.9th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2025-08-12T11:16Z
EPSS history
Timeline
  • 12 AUG 11:16Z
    A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506)…
    cvelistv5