Low · 2.1 CVE-2024-12706 EUVD-2024-54513GHSA-39c9-vmq6-wcfw

SQL Injection vulnerability discovered in OpenText™ Digital Asset Management.

Published Apr 28, 2025 · Updated Apr 28, 2025 · Assigned by OpenText

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText™ Digital Asset Management. T

he vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database.

This issue affects Digital Asset Management.: through 24.4.

Vendor	Product	Affected	Fixed
OpenText™	Digital Asset Management.	≤ 24.4	—