Skip to content
OpenAdvisories
High ICSA-24-228-10 1 CVE

AVEVA Historian Web Server

Published Aug 15, 2024 · Updated Aug 15, 2024

Vendor: AVEVA Product: Historian Server

Summary

Successful exploitation of this vulnerability could allow an authenticated user to get read and write access to the database.

Vulnerabilities 1

  • High 8.5
    CVE-2024-6456

    SQL Injection vulnerability in AVEVA Historian Server

    AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST Interface user who had been socially engineered by a miscreant into opening a specially crafted URL.

    AVEVA Historian Web Server

Revision history

  1. #1

    Initial Publication

References