PT-2025-18099 · Opentext · Openasset Digital Asset Management
CVE-2024-12706
·
Publicado
2025-04-28
·
Atualizado
2025-04-28
CVSS v4.0
2.1
Baixa
| Vetor | AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:C/RE:M/U:Red |
Name of the Vulnerable Software and Affected Versions
OpenText Digital Asset Management versions through 24.4
Description
The issue is related to an SQL Injection vulnerability, which could allow an authenticated user to run arbitrary SQL commands on the underlying database. This problem affects Digital Asset Management.
Recommendations
For OpenText Digital Asset Management versions through 24.4, update to a version that includes a fix for this issue.
As a temporary workaround, consider restricting access to the database and limiting the privileges of authenticated users to minimize the risk of exploitation.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Openasset Digital Asset Management