Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-0857 EUVD-2024-16640GHSA-jvrp-rv38-7jhr

SQLi in Universal Software's FlexWater Corporate Water Management

Published Jul 18, 2024 · Updated Jun 3, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software Inc. FlexWater Corporate Water Management allows SQL Injection.

This issue affects FlexWater Corporate Water Management: before 5.452.0.

Affected products

VendorProductAffectedFixed
Universal Software FlexWater Corporate Water Management < 5.452.0 5.452.0

References