CVE-2024-42844

A SQL Injection vulnerability has been identified in EPICOR Prophet 21 (P21) up to 23.2.5232

High · published March 6, 2025

CVSS v3.1
8.1
EPSS
0%
Percentile
36.3
In the wild
Unconfirmed
What it is

A SQL Injection vulnerability has been identified in EPICOR Prophet 21 (P21) up to 23.2.5232. This vulnerability allows authenticated remote attackers to execute arbitrary SQL commands through unsanitized user input fields to obtain unauthorized information

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00431 · 36.3th percentile
Published
2025-03-06T00:00Z
EPSS history
Timeline
  • 06 MAR 00:00Z
    A SQL Injection vulnerability has been identified in EPICOR Prophet 21 (P21) up to 23.2.5232
    cvelistv5